You can create a data collector to collect logs from a particular host.
Note
This data collector does not work for mapped drives.
Provide the following information, as appropriate:
Field | Description |
---|---|
Target/Collection Host | |
Collection Host (Agent) | Type or select the collection host depending on whether you want to use the Collection Station or the Collection Agent to perform data collection. The collection host is the computer on which the Collection Station or the Collection Agent is located. By default, the Collection Station is already selected. You can either retain the default selection or select the Collection Agent. Note: For this type of data collector, the target host and collection host are expected to have the same values. |
Collector Inputs | |
Directory Path | Directory path must be an absolute path of the log file. You can also specify any system environment variable while configuring a path to a folder on the target host. To retrieve log files from subdirectories, provide the path up to the parent directory. |
Include subdirectories | (Optional) Select this check box if you want to retrieve log files from subdirectories of the file path specified. |
Filename/Rollover Pattern | Specify the file name only, or specify the file name with a rollover pattern to identify subsequent logs. You can use the following wild card characters:
Specifying a rollover pattern can be useful to monitor rolling log files where the log files are saved with the same name but differentiated with some variable like the time stamp or a number. Note: Ensure that you specify a rollover pattern for identifying log files that follow the same data format (which means they will be indexed with the same data pattern). |
Time Zone | By default, the Use file time zone option is selected. This means the data is indexed as per the time zone available in the data file. If the data file does not contain a timezone, then the by default the time zone of the Collection Host (Collection Station or Collection Agent) server is used. You can also manually select a timezone from the list available. This timezone must match the timezone of the server from which you want to collect data. If your data file contains a timezone and you manually specify the timezone, then the manually specified timezone overrides the file timezone. |
Data Pattern | |
Pattern | Select the data pattern to use for indexing the data file. Use one of the following methods to specify the data pattern:
Note: If you select both – a pattern and a date format, the product uses the date format to index the timestamp and the pattern to index rest of the event data. |
Date Format | When you select a data pattern, the matching date format is automatically updated. However, you can specifically find date formats matching the timestamp in your data file. Use one of the following methods to specify a date format:
Notes:
|
Date Locale | You can use this setting to enable reading the date and time string based on the language selected. Note that this setting only applies to those portions of the date and time string that consist letters (digits are not considered). By default, this value is set to English. You can manually select a language to override the default locale. For a list of languages supported, see Language information. |
Poll Interval (mins) | Enter a number to specify the poll interval (in minutes) for the log collection. By default, this value is set to 1. |
Start/Stop Collection | (Optional) Select this check box if you want to start the data collection immediately. |