Copyright © TIBCO Software Inc. All Rights Reserved
Copyright © TIBCO Software Inc. All Rights Reserved


Chapter 7 Universal Collector Microagent Management : Collecting Logs

Collecting Logs
You can collect logs from different sources: Real-Time File logs, Syslog, Remote files, Command logs. You can also collect metrics from Hawk Rulebases and Microagents. Click UC Configuration tab in the upper-right corner to view the list of collectors and forwarders.
Creating and Configuring Log Sources
You can add, copy, delete, import, export, and deploy log sources.
Adding a New Log Source
You can add a new log source by using the following steps:
1.
In the Hawk Console, click the UC Configuration tab in the upper-right corner.
2.
Select Domain and Agent from dropdown list. List of collectors and forwards is displayed.
3.
From New dropdown list, select the type of log sources you want to add:
4.
5.
Click Configure to save the log source.
Result
A new log source is added in the list of log sources.
 
 
Copying Log Source
To copy a log source, click Copy icon in the Actions column of the log source.
The copied log sources are displayed below the list of log sources with the name Log_source_name_copy.
Deleting Log Source
To delete a log source, click Delete icon in the Actions column of the log source.
Deploying Log Source
You can deploy log source to one or more hawk agents.
Procedure
1. Open the Universal Collector microagent Console by clicking the UC Configuration tab in the upper-right corner.
2. Click Deploy to icon in the Actions column of the log source you want to deploy.
3. In Deploy Collector to window, select Hawk agents to which you want to deploy the log source and click Yes.
Importing Log Sources
Procedure
1. Open the Universal Collector microagent Console by clicking the UC Configuration tab in the upper-right corner.
2. On the Collectors tab, click import icon beside New dropdown list.
3. Click Open.
Result
If the import is successful, the imported Collector is listed on the Collectors tab.
Exporting Log Sources
Procedure
1. Open the Universal Collector microagent Console by clicking the UC Configuration tab in the upper-right corner.
2. On the Collectors tab, export the collector by using either of the following ways:
3. In the Save As window, browse to the location where you want to save the .xml or .zip file and click Save.
Editing Log Sources
You can edit log source configuration using edit icon in the Actions column of Log Source list.
Editing a Real-Time File Log Source
You can modify the following fields of the Real-Time File log source:
Click toggle button Yes or No to define whether the current Log Source is enabled or disabled.
Not matching Regex (that is, filter the logs that match the regex)
NOTE: Log file must be present at host machine where Hawk Agent is running.
For example, c:\temp\logFile[date].log to obtain file names such as logFile20170521.log
Universal Collector microagent can collect any file with an [id] whose number of digits is between 1 and 9 inclusive.
Before activating this monitoring option, ensure that you set the LMI Connection > Forwarding > Forward UC Internal Logs option is ON.
 
Editing a Syslog Log Source
You can modify the following fields of the Syslog log source:
Click toggle button Yes or No to define whether the current Log Source is enabled or disabled.
Editing a Hawk Rulebase Log Source
Click toggle button Yes or No to define whether the current log source is enabled or disabled.
 
Editing a Hawk Metrics Log Source
Click toggle button Yes or No to define whether the current Log Source is enabled or disabled
 
Editing a Command Line Log Source
You can modify the following fields of the Command line log source.
Click toggle button Yes or No to define whether the current Log Source is enabled or disabled.
Universal Collector Collection date
 
Editing a Remote File Log Source
You can modify the following fields of the Remote file log source:
Click toggle button Yes or No to define whether the current Log Source is enabled or disabled.
Universal Collector Collection date
For example, c:\temp\logFile[date].log to obtain file names such as logFile20170521.log
Before activating this monitoring option, ensure that you set the LMI Connection > Forwarding > Forward UC Internal Logs option is ON.

Copyright © TIBCO Software Inc. All Rights Reserved
Copyright © TIBCO Software Inc. All Rights Reserved