You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/integrations/amazon-aws/dynamodb.md
+1-14Lines changed: 1 addition & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -113,20 +113,7 @@ The “**tablename**” field will be created.
113
113
114
114
### Field Extraction Rule(s)
115
115
116
-
Create Field Extraction Rule for CloudTrail Logs. Learn how to create Field Extraction Rule [here](/docs/manage/field-extractions/create-field-extraction-rule).
Field Extraction Rule for CloudTrail Logs are automatically created for Database Application Components named as **AwsObservabilityDynamoDBCloudTrailLogsFER**.
Copy file name to clipboardExpand all lines: docs/integrations/databases/cassandra.md
+1-20Lines changed: 1 addition & 20 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -263,26 +263,7 @@ Pivoting to Tracing data from Entity Inspector is possible only for “Cassandra
263
263
5. Sumo Logic Kubernetes collection will automatically start collecting logs from the pods having the annotations defined above.
264
264
6. Verify logs in Sumo Logic.
265
265
266
-
3. Add an FER to normalize the fields in Kubernetes environments. Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we need to create a Field Extraction Rule if not already created for Proxy Application Components. This step is not needed if one is using application components solution terraform script. To do so:
267
-
1. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select**Manage Data > Logs > Field Extraction Rules**. <br/>[**New UI**](/docs/get-started/sumo-logic-ui). In the top menu select**Configuration**, and then under **Logs**select**Field Extraction Rules**. You can also click the **Go To...** menu at the top of the screen andselect**Field Extraction Rules**.
268
-
2. Click the **+ Add** button on the top right of the table.
269
-
3. The **Add Field Extraction Rule** form will appear:
270
-
4. Enter the following options:
271
-
***Rule Name**. Enter the name as**App Observability - Database**.
272
-
***Applied At.** Choose **Ingest Time**
273
-
***Scope**. Select**Specific Data**
274
-
***Scope**: Enter the following keyword search expression:
***Parse Expression**. Enter the following parse expression:
279
-
```sql
280
-
if (!isEmpty(pod_labels_environment), pod_labels_environment, "") as environment
281
-
| pod_labels_component as component
282
-
| pod_labels_db_system as db_system
283
-
| if (!isEmpty(pod_labels_db_cluster), pod_labels_db_cluster, null) as db_cluster
284
-
```
285
-
5. Click **Save** to create the rule.
266
+
3. **FER to normalize the fields in Kubernetes environments.** Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we will have Field Extraction Rule automatically created for Database Application Components named as**AppObservabilityCassandraDatabaseFER**.
Copy file name to clipboardExpand all lines: docs/integrations/databases/couchbase.md
+1-22Lines changed: 1 addition & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -199,28 +199,7 @@ This section explains the steps to collect Couchbase logs from a Kubernetes envi
199
199
```
200
200
5. Sumo Logic Kubernetes collection will automatically start collecting logs from the pods having the annotations defined above.
201
201
6. Verify logs in Sumo Logic.
202
-
3. **Add a FER to normalize the fields in Kubernetes environments**. This step is not needed if using application components solution terraform script. Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we need to create a Field Extraction Rule if not already created for Proxy Application Components. To do so:
203
-
1. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select**Manage Data > Logs > Field Extraction Rules**. <br/>[**New UI**](/docs/get-started/sumo-logic-ui). In the top menu select**Configuration**, and then under **Logs**select**Field Extraction Rules**. You can also click the **Go To...** menu at the top of the screen andselect**Field Extraction Rules**.
204
-
2. Click the **+ Add Rule** button on the top right of the table.
205
-
3. The **Add Field Extraction Rule** form will appear:
206
-
4. Enter the following options:
207
-
***Rule Name**. Enter the name as**App Observability - Proxy**.
208
-
***Applied At.** Choose **Ingest Time**
209
-
***Scope**. Select**Specific Data**
210
-
***Scope**: Enter the following keyword search expression:
***Parse Expression**. Enter the following parse expression:
216
-
```sql
217
-
if (!isEmpty(pod_labels_environment), pod_labels_environment, "") as environment
218
-
| pod_labels_component as component
219
-
| pod_labels_db_system as db_system
220
-
| pod_labels_db_cluster as db_cluster
221
-
| if (!isEmpty(pod_labels_db_cluster), pod_labels_db_cluster, null) as db_cluster
222
-
```
223
-
5. Click **Save** to create the rule.
202
+
3. **FER to normalize the fields in Kubernetes environments.** Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we will have Field Extraction Rule automatically created for Database Application Components named as**AppObservabilityCouchbaseDatabaseFER**.
Copy file name to clipboardExpand all lines: docs/integrations/databases/mariadb.md
+1-21Lines changed: 1 addition & 21 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -200,27 +200,7 @@ This section explains the steps to collect MariaDB logs from a Kubernetes enviro
200
200
```
201
201
5. Sumo Logic Kubernetes collection will automatically start collecting logs from the pods having the annotations defined above.
202
202
6. Verify logs in Sumo Logic.
203
-
3. **Add an FER to normalize the fields in Kubernetes environments**. This step is not needed if using application components solution terraform script. Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we need to create a Field Extraction Rule if not already created for Proxy Application Components:
204
-
1. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select**Manage Data > Logs > Field Extraction Rules**. <br/>[**New UI**](/docs/get-started/sumo-logic-ui). In the top menu select**Configuration**, and then under **Logs**select**Field Extraction Rules**. You can also click the **Go To...** menu at the top of the screen andselect**Field Extraction Rules**.
205
-
2. Click the **+ Add** button on the top right of the table.
206
-
3. The **Add Field Extraction Rule** form will appear:
207
-
4. Enter the following options:
208
-
***Rule Name**. Enter the name as**App Observability - database**.
209
-
***Applied At.** Choose **Ingest Time**
210
-
***Scope**. Select**Specific Data**
211
-
***Scope**. Enter the following keyword search expression:
***Parse Expression**. Enter the following parse expression:
217
-
```sql
218
-
if (!isEmpty(pod_labels_environment), pod_labels_environment, "") as environment
219
-
| pod_labels_component as component
220
-
| pod_labels_db_system as db_system
221
-
| if (!isEmpty(pod_labels_db_cluster), pod_labels_db_cluster, null) as db_cluster
222
-
```
223
-
5. Click **Save** to create the rule.
203
+
3. **FER to normalize the fields in Kubernetes environments.** Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we will have Field Extraction Rule automatically created for Database Application Components named as**AppObservabilityMariaDBDatabaseFER**.
Copy file name to clipboardExpand all lines: docs/integrations/databases/memcached.md
+1-21Lines changed: 1 addition & 21 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -217,27 +217,7 @@ This section explains the steps to collect Memcached logs from a Kubernetes envi
217
217
kubectl describe pod <Memcached_pod_name>
218
218
```
219
219
4. Sumo Logic Kubernetes collection will automatically start collecting logs from the pods having the annotations defined above.
220
-
3. **Add a FER to normalize the fields in Kubernetes environments**. This step is not needed if one is using application components solution terraform script. Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we need to create a Field Extraction Rule if not already created for Proxy Application Components. To do so:
221
-
1. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select**Manage Data > Logs > Field Extraction Rules**. <br/>[**New UI**](/docs/get-started/sumo-logic-ui). In the top menu select**Configuration**, and then under **Logs**select**Field Extraction Rules**. You can also click the **Go To...** menu at the top of the screen andselect**Field Extraction Rules**.
222
-
2. Click the + Add button on the top right of the table.
223
-
3. The **Add Field Extraction Rule** form will appear:
224
-
4. Enter the following options:
225
-
***Rule Name**. Enter the name as**App Observability - Database**.
226
-
***Applied At**. Choose **Ingest Time**
227
-
***Scope**. Select**Specific Data**
228
-
***Scope**: Enter the following keyword search expression:
***Parse Expression**. Enter the following parse expression:
234
-
```sql
235
-
if (!isEmpty(pod_labels_environment), pod_labels_environment, "") as environment
236
-
| pod_labels_component as component
237
-
| pod_labels_db_system as db_system
238
-
| if (!isEmpty(pod_labels_db_cluster), pod_labels_db_cluster, null) as db_cluster
239
-
```
240
-
5. Click **Save** to create the rule.
220
+
3. **FER to normalize the fields in Kubernetes environments.** Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we will have Field Extraction Rule automatically created for Database Application Components named as**AppObservabilityMemcachedDatabaseFER**.
Copy file name to clipboardExpand all lines: docs/integrations/databases/mongodb.md
+2-21Lines changed: 2 additions & 21 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -234,27 +234,8 @@ Pivoting to Tracing data from Entity Inspector is possible only for “MongoDB a
234
234
kubectl describe pod <MongoDB_pod_name>
235
235
```
236
236
5. Sumo Logic Kubernetes collection will automatically start collecting logs from the pods having the annotations defined above.
237
-
3. **Add an FER to normalize the fields in Kubernetes environments**. This step is not needed if one is using application components solution terraform script. Labels created in Kubernetes environments automatically are prefixed with `pod_labels`. To normalize these for our app to work, we need to create a Field Extraction Rule if not already created for Database Application Components. To do so:
238
-
1. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Manage Data > Logs > Field Extraction Rules**. <br/>[**New UI**](/docs/get-started/sumo-logic-ui). In the top menu select **Configuration**, and then under **Logs** select **Field Extraction Rules**. You can also click the **Go To...** menu at the top of the screen and select **Field Extraction Rules**.
239
-
2. Click the + Add button on the top right of the table.
240
-
3. The **Add Field Extraction Rule** form will appear:
241
-
4. Enter the following options:
242
-
* **Rule Name**. Enter the name as **App Observability - Database**.
243
-
* **Applied At**. Choose **Ingest Time**
244
-
* **Scope**. Select **Specific Data**
245
-
* **Scope**: Enter the following keyword search expression:
* **Parse Expression**.Enter the following parse expression:
251
-
```sql
252
-
| if (!isEmpty(pod_labels_environment), pod_labels_environment, "") as environment
253
-
| pod_labels_component as component
254
-
| pod_labels_db_system as db_system
255
-
| pod_labels_db_cluster as db_cluster
256
-
```
257
-
4. Click **Save** to create the rule.
237
+
238
+
3. **FER to normalize the fields in Kubernetes environments.** Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we will have Field Extraction Rule automatically created for Database Application Components named as **AppObservabilityMongoDBDatabaseFER**.
Copy file name to clipboardExpand all lines: docs/integrations/databases/mysql.md
+1-23Lines changed: 1 addition & 23 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -345,29 +345,7 @@ Sumo Logic Kubernetes collection will automatically start collecting logs from t
345
345
346
346
</details>
347
347
348
-
2.**Add an FER to normalize the fields in Kubernetes environments**. This step is not needed if using application components solution terraform script. Labels created in Kubernetes environments are automatically prefixed with pod_labels. To normalize these for our app to work, we'll create a [Field Extraction Rule](/docs/manage/field-extractions/create-field-extraction-rule), Database Application Components, assuming it does not already exist:
349
-
1.[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Manage Data > Logs > Field Extraction Rules**. <br/>[**New UI**](/docs/get-started/sumo-logic-ui). In the top menu select **Configuration**, and then under **Logs** select **Field Extraction Rules**. You can also click the **Go To...** menu at the top of the screen and select **Field Extraction Rules**.
350
-
2. Click the **+ Add**.
351
-
3. The **Add Field Extraction** pane appears.
352
-
4.**Rule Name.** Enter "App Observability - Database".
353
-
5.**Applied At**. Choose "Ingest Time".
354
-
6.**Scope**. Select "Specific Data".
355
-
***Scope**. Enter the following keyword search expression:
3.**FER to normalize the fields in Kubernetes environments.** Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we will have Field Extraction Rule automatically created for Database Application Components named as **AppObservabilityMySQLDatabaseFER**.
Copy file name to clipboardExpand all lines: docs/integrations/databases/oracle.md
+1-21Lines changed: 1 addition & 21 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -252,27 +252,7 @@ annotations:
252
252
2. The Sumo Logic Kubernetes collection will automatically start collecting logs from the pods having the annotations defined above.
253
253
3. Verify logs in Sumo Logic.
254
254
255
-
**Add an FER to normalize the fields in Kubernetes environments**
256
-
257
-
This step is not needed if you're using application components solution terraform script. Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we need to create a Field Extraction Rule if not already created for Proxy Application Components. To do so:
258
-
1.[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Manage Data > Logs > Field Extraction Rules**. <br/>[**New UI**](/docs/get-started/sumo-logic-ui). In the top menu select **Configuration**, and then under **Logs** select **Field Extraction Rules**. You can also click the **Go To...** menu at the top of the screen and select **Field Extraction Rules**.
259
-
1. Click the **+Add** button on the top right of the table.
260
-
1. The **Add Field Extraction Rule** form will appear. Enter the following options:
261
-
1.**Rule Name**. Enter the name as **App Observability - database**.
262
-
2.**Applied At**. Choose **Ingest Time**.
263
-
3.**Scope**. Select **Specific Data**.
264
-
4.**Scope**: Enter the following keyword search expression.
5.**Parse Expression**. Enter the following parse expression.
269
-
```sql
270
-
if (!isEmpty(pod_labels_environment), pod_labels_environment, "") as environment
271
-
| pod_labels_component as component
272
-
| pod_labels_db_system as db_system
273
-
| if(!isEmpty(pod_labels_db_cluster), pod_labels_db_cluster, null) as db_cluster
274
-
```
275
-
1. Click **Save** to create the rule.
255
+
**FER to normalize the fields in Kubernetes environments.** Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we will have Field Extraction Rule automatically created for Database Application Components named as **AppObservabilityOracleDatabaseFER**.
Copy file name to clipboardExpand all lines: docs/integrations/databases/redis.md
+1-19Lines changed: 1 addition & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -244,25 +244,7 @@ This section explains the steps to collect Redis logs from a Kubernetes environm
244
244
kubectl describe pod <redis_pod_name>
245
245
```
246
246
5. Sumo Logic Kubernetes collection will automatically start collecting logs from the pods having the annotations defined above.
247
-
3. **Add an FER to normalize the fields in Kubernetes environments**. This step is not needed if using application components solution terraform script. Labels created in Kubernetes environments automatically are prefixed with `pod_labels`. To normalize these for our app to work, we need to create a Field Extraction Rule. To do so:
248
-
* [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select**Manage Data > Logs > Field Extraction Rules**. <br/>[**New UI**](/docs/get-started/sumo-logic-ui). In the top menu select**Configuration**, and then under **Logs**select**Field Extraction Rules**. You can also click the **Go To...** menu at the top of the screen andselect**Field Extraction Rules**.
249
-
* Click the + Add button on the top right of the table.
250
-
* The **Add Field Extraction Rule** form will appear:
251
-
* Enter the following options:
252
-
***Rule Name**. Enter the name as**App Observability - Database**.
253
-
***Applied At**. Choose **Ingest Time**.
254
-
***Scope**. Select**Specific Data**. Enter the following keyword search expression:
***Parse Expression**. Enter the following parse expression:
259
-
```sql
260
-
| if (!isEmpty(pod_labels_environment), pod_labels_environment, "") as environment
261
-
| pod_labels_component as component
262
-
| pod_labels_db_system as db_system
263
-
| if (!isEmpty(pod_labels_db_cluster), pod_labels_db_cluster, null) as db_cluster
264
-
```
265
-
* Click **Save** to create the rule.
247
+
3. **FER to normalize the fields in Kubernetes environments.** Labels created in Kubernetes environments automatically are prefixed with pod_labels. To normalize these for our app to work, we will have Field Extraction Rule automatically created for Database Application Components named as**AppObservabilityRedisDatabaseFER**.
0 commit comments