How do I check the log usage in my account?

How do I check and reduce unwanted log usage in my account?

Log Usage Summary

 

Log Usage Summary refers to the total space consumed by the AppLogs in Site24x7. You can check

  • Total log usage

  • Daily Usage (represented with date)

  • Log usage by Servers (represented in MB), and

  • Log usage by Log Types (represented in MB).

With the above data, you can figure out which log types, or servers are consuming more space.

 

You can check the log usage history on the AppLogs Log Usage Summary page (Left Panel > AppLogs > Log Usage Summary). 



How to check and reduce unwanted log usage of LogTypes?


Let's consider Windows Event Log as an example since it consumes more space. To determine the events that have consumed the most space, enter the queries below in the AppLog Search Page (Left Panel > AppLogs): 

  • To find which type has more logs counts and consumes more log space

            logtype="Windows Event Logs" groupby type

  • To find which eventId has a higher logs count and consumes more log space

            logtype="Windows Event Logs" groupby eventid

  • To find the monitors, of which eventId consumes more logs space

            logtype="Windows Event Logs" groupby eventid,monitor_name

 

Filtering the logs

 

If you find some unwanted events are contributing more space, then you can filter them. You can filter Windows event log in the agent side before uploading them to Site24x7. You can configure settings to eliminate the unwanted event IDs, so that you can skip them while uploading. You can set this field configuration while Adding a Log Type, or after adding it by editing the log type.

 

Here are the steps to filter out the logs: 

1. Go to Admin > AppLogs > Log Types > click on the Log Type Windows Event Logs.
2. In the Sample Output table, hover over the field name Event ID to find the icon, and click on it. You'll be able to view the Field Configurations pop-up.
3. Define the unwanted event IDs under the Filter Log Lines option. To accomplish this, complete both of the actions below:
  • Select Log Lines only if this Field: Choose Doesn't Match to filter unwanted event IDs.

  • Any of these Values: Enter the event IDs that you don't want to upload.

4. Click Apply.

    • Related Articles

    • How to limit log uploads from a particular log type?

      Use case: As a sysadmin, you may want to check a specific log type that you upload and manage using Site24x7 AppLogs. Assuming that the upload limit of your account is 100 GB and there are four types of logs managed on a single account, keeping an ...
    • How do I disable the AppLogs agent (process/service)?

      When you disable the AppLogs agent, log collection on that server will stop and the AppLogs Agent service/process will not run in your server. To disable the AppLogs agent: Navigate to the Server tab. Click on the server monitor in which the agent ...
    • How do I disable log collection for individual log type

      Let's say you're collecting logs from different sources like Windows event logs, SQL server logs, and Cassandra logs. If you notice that you're reaching the log upload limit for the month you can choose to disable collection for one of the log types, ...
    • Configuring voice calls and SMS alerts for AppLogs

      For the AppLogs Alerts that you configure in the AppLogs tab, you can set up email, SMS, voice calls, and instant messenger alerts at the monitor level. For example, if you want to configure email or voice call alerts for your Syslog monitor, edit ...
    • How long does Site24x7 retain my logs for searching?

      Log retention for searching Log search retention refers to the number of days your collected log data will be stored and available for searching in Site24x7. By default, this is set to 30 days. Site24x7 stores the log data collected for log ...