You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Windows source template creates an OpenTelemetry configuration that can be pushed to a remotely managed OpenTelemetry collector (abbreviated as otelcol). By creating this source template and pushing the config to the appropriate OpenTelemetry agent, you can ensure collection of windows event log and metrics of Windows to Sumo Logic.
20
+
The Windows source template creates an OpenTelemetry configuration that can be pushed to a remotely managed OpenTelemetry collector (abbreviated as otelcol). By creating this source template and pushing the config to the appropriate OpenTelemetry agent, you can ensure collection of Windows event log and metrics of Windows to Sumo Logic.
21
21
22
22
## Fields creation in Sumo Logic for Windows
23
23
24
-
If not already present, the following [Fields](/docs/manage/fields/) are created as part of source template creation.
24
+
If not already present, the following [fields](/docs/manage/fields/) are created as part of source template creation.
25
25
26
26
-**`sumo.datasource`**. Fixed value of **windows**.
27
-
-**`deployment.environment`** User configured field at the time of collector installation. This identifies the environment where the Windows system resides. For example: `dev`, `prod`, or `qa`.
27
+
-**`deployment.environment`**. User configured field at the time of collector installation. This identifies the environment where the Windows system resides. For example: `dev`, `prod`, or `qa`.
28
28
-**`host.group`**. This is a collector-level field that is user configured at the time of collector installation. It identifies the Windows host group.
29
29
-**`host.name`**. This is tagged through the resourcedetection processor. It holds the value of the host name where the OTel collector is installed.
30
30
@@ -45,27 +45,27 @@ import CollectorInstallation from '../../../../../reuse/apps/opentelemetry/colle
45
45
46
46
### Step 2: Configure the source template
47
47
48
-
In this step, you will configure the yaml required for Windows Collection. Below are the inputs required for configuration:
48
+
In this step, you will configure the YAML required for Windows collection. Below are the inputs required for configuration:
49
49
50
50
-**Name**. Name of the source template.
51
51
-**Description**. Description for the source template.
52
52
53
53
#### Logs Collection
54
-
-**Fields/Metadata**. You can provide any customer fields to be tagged with the data collected. By default, sumo tags `_sourceCategory` with the value otel/windows.
55
-
-**Windows Event**. In this section you can select choose among the most widely used windows event channel for which windows event log collection will be enabled. You can also provide **Custom Event Channels** providing any customer event channel for which event logs are to be collected.
54
+
-**Fields/Metadata**. You can provide any customer fields to be tagged with the data collected. By default, Sumo Logic tags `_sourceCategory` with the value `otel/windows`.
55
+
-**Windows Event**. In this section you can select choose among the most widely used Windows event channel for which Windows event log collection will be enabled. You can also provide **Custom Event Channels** providing any customer event channel for which event logs are to be collected.
56
56
-**Forward to SIEM**. Check the checkbox to forward your data to [Cloud SIEM](/docs/cse).
57
57
58
58
#### Metrics Collection
59
59
-**Metrics**. Select the metric scrappers you want to enable. By default, metric collection for CPU, memory, disk, load, file system, network and paging are enabled, and process metric collection is disabled.
60
60
61
-
##### Enable process metric collection (Optional)
61
+
##### Enable process metric collection (optional)
62
62
63
63
import ProcMetrics from '../../../../../reuse/apps/opentelemetry/process-metric-collection.md';
64
64
65
65
<ProcMetrics/>
66
66
67
67
-**Scan Interval**. The frequency at which the source is scanned.
68
-
-**Processing Rules**. You can add processing rules for logs/metrics collected. To learn more, refer to [Processing Rules](../../processing-rules/index.md). For masking windows event logs, refer to [Mask Rules for Windows Source Template](mask-rules-windows.md).
68
+
-**Processing Rules**. You can add processing rules for logs/metrics collected. To learn more, refer to [Processing Rules](/docs/send-data/opentelemetry-collector/remote-management/processing-rules/). For masking windows event logs, refer to [Mask Rules for Windows Source Template](/docs/send-data/opentelemetry-collector/remote-management/processing-rules/mask-rules-windows).
69
69
70
70
### Step 3: Push the source template to the desired remotely managed collectors
71
71
@@ -74,5 +74,5 @@ import DataConfiguration from '../../../../../reuse/apps/opentelemetry/data-conf
74
74
<DataConfiguration/>
75
75
76
76
:::info
77
-
Refer to the [changelog](changelog.md) for information on periodic updates to this source template.
77
+
Refer to the [changelog](/docs/send-data/opentelemetry-collector/remote-management/source-templates/windows/changelog/) for information on periodic updates to this source template.
0 commit comments