How do I check and reduce unwanted log usage in my account?
Log Usage Summary
Log Usage Summary refers to the total space consumed by the AppLogs in Site24x7. You can check
Total log usage
Daily Usage (represented with date)
Log usage by Servers (represented in MB), and
Log usage by Log Types (represented in MB).
With the above data, you can figure out which log types, or servers are consuming more space.
You can check the log usage history on the AppLogs Log Usage Summary page (Left Panel > AppLogs > Log Usage Summary).
How to check and reduce unwanted log usage of LogTypes?
Let's consider Windows Event Log as an example since it consumes more space. To determine the events that have consumed the most space, enter the queries below in the AppLog Search Page (Left Panel > AppLogs):
To find which type has more logs counts and consumes more log space
logtype="Windows Event Logs" groupby type
To find which eventId has a higher logs count and consumes more log space
logtype="Windows Event Logs" groupby eventid
To find the monitors, of which eventId consumes more logs space
logtype="Windows Event Logs" groupby eventid,monitor_name
Filtering the logs
If you find some unwanted events are contributing more space, then you can filter them. You can filter Windows event log in the agent side before uploading them to Site24x7. You can configure settings to eliminate the unwanted event IDs, so that you can skip them while uploading. You can set this field configuration while Adding a Log Type, or after adding it by editing the log type.
Here are the steps to filter out the logs:
2. In the Sample Output table, hover over the field name Event ID to find the
3. Define the unwanted event IDs under the Filter Log Lines option. To accomplish this, complete both of the actions below:
Select Log Lines only if this Field: Choose Doesn't Match to filter unwanted event IDs.
Any of these Values: Enter the event IDs that you don't want to upload.
Related Articles
How to limit log uploads from a particular log type?
Use case: As a sysadmin, you may want to check a specific log type that you upload and manage using Site24x7 AppLogs. Assuming that the upload limit of your account is 100 GB and there are four types of logs managed on a single account, keeping an ...How do I disable the AppLogs agent (process/service)?
When you disable the AppLogs agent, log collection on that server will stop and the AppLogs Agent service/process will not run in your server. To disable the AppLogs agent: Navigate to the Server tab. Click on the server monitor in which the agent ...Configuring voice calls and SMS alerts for AppLogs
For the AppLogs Alerts that you configure in the AppLogs tab, you can set up email, SMS, voice calls, and instant messenger alerts at the monitor level. For example, if you want to configure email or voice call alerts for your Syslog monitor, edit ...How do I disable log collection for individual log type
Let's say you're collecting logs from different sources like Windows event logs, SQL server logs, and Cassandra logs. If you notice that you're reaching the log upload limit for the month you can choose to disable collection for one of the log types, ...Licensing for AppLogs Alerts
Every log type is treated as a monitor and any search query can be configured for alerting. Here's the number of search queries for which you can configure to receive alerts for free: Log size Number of free search queries 10GB 5 ≤ 100GB 10 ≤ 500GB ...