Migrating log collection integrations from BMC Helix Developer Tools
To migrate connectors
- Go to BMC Helix Developer Tools and note the connector details that you want to migrate; for example name and type of the connector.
- For the Docker connector, perform the following steps:
- Run the following command: docker ps.
Container details are displayed. - Note the container ID of the integration that you are migrating.
- Stop and delete the container by running the following commands:
docker stop <container ID>
docker rm <container ID>
- Run the following command: docker ps.
- For the Linux connector, perform the following steps:
- To stop the td-agent service, run the following command: systemctl stop td-agent.service.
- To disable the td-agent service, run the following command: systemctl disable td-agent.service.
- To remove the td-agent service, run the following command: rm -rf /etc/systemd/system/td-agent.service.
- To reload the daemon, run the following command: systemctl daemon-reload.
- To remove the td-agent directory, run the following command: rm -rf /opt/td-agent.
- For the Windows connector, delete the service created with the name of the integration by running the following command on the command prompt: sc delete <service name>.
- Delete the existing integration.
In BMC Helix Log Analytics, create a connector.
For more information, see Installing-and-managing-connectors.
- In BMC Helix Log Analytics, click Collection and then click Connectors and make sure that the connector state is Active.
To migrate integrations
- Go to BMC Helix Developer Tools and note the integration details, for example, name, parsing, filtering, and log source configurations.
- Go to BMC Helix Log Analytics and create a parsing rule.
For more information, see Creating-a-parsing-rule. - Create a filtering rule.
For more information, see Creating-a-filtering-rule. - Create a collection policy.
For more information, see Creating-collection-policies. Log collection starts after you enable the policy.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*