Skip to content

Commit 4464d77

Browse files
amee-sumojpipkin1
andauthored
Updated Remote and Local File Source docs (#5192)
* Updated Remote and Local File Sources * Update docs/send-data/installed-collectors/sources/local-file-source.md Co-authored-by: John Pipkin (Sumo Logic) <[email protected]> * Update docs/send-data/installed-collectors/sources/remote-file-source/index.md Co-authored-by: John Pipkin (Sumo Logic) <[email protected]> --------- Co-authored-by: John Pipkin (Sumo Logic) <[email protected]>
1 parent 86a970f commit 4464d77

File tree

4 files changed

+4
-4
lines changed

4 files changed

+4
-4
lines changed

docs/send-data/installed-collectors/sources/local-file-source.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -91,6 +91,7 @@ When the Sumo collector accesses a log file to read its content, the collector o
9191
* ![orange exclamation point.png](/img/reuse/orange-exclamation-point.png) An orange triangle with an exclamation point is shown when the field doesn't exist in the Fields table schema. In this case, an option to automatically add the nonexistent fields to the Fields table schema is provided. If a field is sent to Sumo that does not exist in the Fields schema it is ignored, known as dropped.
9292

9393
1. Set any of the following options under **Advanced**:
94+
<img src={useBaseUrl('/img/send-data/advanced-options-local-file-source.png')} alt="Advanced options for log" style={{border: '1px solid gray'}} width="600"/>
9495

9596
* **Denylist.** Enter the path for files to exclude from the Source collection. Wildcard syntax is allowed when specifying unwanted files. For example, if you are collecting` /var/log/*.log` but don’t want to collect `unwanted*.log`, then specify `/var/log/unwanted*.log`. You can also exclude subdirectories, for example, if you are collecting` /var/log/**/*.log` but do not want to collect anything from `/var/log/unwanted `directory, specify `/var/log/unwanted`. You do not need to denylist compressed files that end with the file extensions tar, bz2, gz, z, zip, jar, war, 7z, rar, exe, dll, xz, or /var/log/(lastlog\|btmp\|wtmp) binary files. Sumo Logic, automatically excludes these compressed file extensions when collecting data.  tar.gz files are supported
9697
* **Enable Timestamp Parsing.** This option is selected by default. If it's deselected, no timestamp information is parsed at all.

docs/send-data/installed-collectors/sources/remote-file-source/index.md

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,9 @@ description: You can collect file tail data from a remote system using SSH.
55
---
66

77
import CollBegin from '../../../../reuse/collection-should-begin-note.md';
8+
import useBaseUrl from '@docusaurus/useBaseUrl';
89

9-
Log files collected using a Remote File Source must be encoded in UTF-8 or ASCII. If you are editing a Source, metadata changes are reflected going forward. Metadata for previously collected log data will not be retroactively changed.
10+
If you are editing a Source, metadata changes are reflected going forward. Metadata for previously collected log data will not be retroactively changed.
1011

1112
Sumo Logic scans remote directories every 30 seconds.
1213

@@ -50,9 +51,7 @@ To configure a Remote File Source:
5051
![remote file source credential input.png](/img/send-data/remote-file-source-credential-input.png)
5152

5253
1. Set any of the following under **Advanced.**
53-
54-
![Local File UI June 2021.png](/img/send-data/Local-File-UI.png)
55-
54+
<img src={useBaseUrl('/img/send-data/advanced-options-remote-file-source.png')} alt="Advanced options for log" style={{border: '1px solid gray'}} width="600" />
5655
* **Denylist.** Optional. Add any files to be excluded by including one or more path expressions separated by commas. Note that this field takes a maximum of 10240 characters.
5756
* **Enable Timestamp Parsing.** This option is selected by default. If it's deselected, no timestamp information is parsed at all.
5857
* **Time Zone.** There are two options for Time Zone. You can use the time zone present in your log files, and then choose an option in case time zone information is missing from a log message. Or, you can have Sumo Logic completely disregard any time zone information present in logs by forcing a time zone. It's very important to have the proper time zone set, no matter which option you choose. If the time zone of logs cannot be determined, Sumo Logic assigns logs UTC; if the rest of your logs are from another time zone your search results will be affected.
197 KB
Loading
166 KB
Loading

0 commit comments

Comments
 (0)