How do I check the log usage in my account?

How do I check and reduce unwanted log usage in my account?

Log Usage Summary

 

Log Usage Summary refers to the total space consumed by the AppLogs in Site24x7. You can check

  • Total log usage

  • Daily Usage (represented with date)

  • Log usage by Servers (represented in MB), and

  • Log usage by Log Types (represented in MB).

With the above data, you can figure out which log types, or servers are consuming more space.

 

You can check the log usage history on the AppLogs Log Usage Summary page (Left Panel > AppLogs > Log Usage Summary). 

‚Äč

How to check and reduce unwanted log usage of LogTypes?


Let's consider Windows Event Log as an example since it consumes more space. To determine the events that have consumed the most space, enter the queries below in the AppLog Search Page (Left Panel > AppLogs): 

  • To find which type has more logs counts and consumes more log space

            logtype="Windows Event Logs" groupby type

  • To find which eventId has a higher logs count and consumes more log space

            logtype="Windows Event Logs" groupby eventid

  • To find the monitors, of which eventId consumes more logs space

            logtype="Windows Event Logs" groupby eventid,monitor_name

 

Filtering the logs

 

If you find some unwanted events are contributing more space, then you can filter them. You can filter Windows event log in the agent side before uploading them to Site24x7. You can configure settings to eliminate the unwanted event IDs, so that you can skip them while uploading. You can set this field configuration while Adding a Log Type, or after adding it by editing the log type.

 

Here are the steps to filter out the logs: 

1. Go to Admin > AppLogs > Log Types > click on the Log Type Windows Event Logs.
2. In the Sample Output table, hover over the field name Event ID to find the icon, and click on it. You'll be able to view the Field Configurations pop-up.
3. Define the unwanted event IDs under the Filter Log Lines option. To accomplish this, complete both of the actions below:
  • Select Log Lines only if this Field: Choose Doesn't Match to filter unwanted event IDs.

  • Any of these Values: Enter the event IDs that you don't want to upload.

4. Click Apply.

    • Related Articles

    • How to limit log uploads from a particular log type.

      Use case: As a sysadmin, you may want to check a specific log type that you upload and manage using Site24x7 AppLogs. Assuming that the upload limit of your account is 100 GB and there are four types of logs managed on a single account, keeping an ...
    • Configuring voice calls and SMS alerts for AppLogs

      Set up e-mail, SMS, voice call, and instant messenger alerts for AppLogs Alerts (that you configure in the AppLogs tab). Log in to your Site24x7 account. Click Admin > User and Alert Management > Users and Alerts. In the Users screen, you can edit an ...
    • How do I disable log collection for individual log type

      Let's say you're collecting logs from different sources like Windows event logs, SQL server logs, and Cassandra logs. If you notice that you're reaching the log upload limit for the month you can choose to disable collection for one of the log types, ...
    • How long are my logs retained by Site24x7?

      Log retention Log retention refers to the number of days the collected log data will be stored in Site24x7. This by default is set to 30 days.  Site24x7 stores the log data collected for log management for a maximum of 30 days. If you want to ...
    • Licensing for AppLogs Alerts

      Every log type is treated as a monitor and any search query can be configured for alerting. Here's the number of search queries for which you can configure to receive alerts for free:  Log size Number of free search queries 10GB 5 ≤ 100GB 10 ≤ 500GB ...