Troubleshooting tips for log collection errors

The following is a list of possible log collection errors and the solutions to fix them:

Error message	Reason	Solution
Upload Limit Reached	You might have reached the maximum upload limit configured for this log type in the current billing cycle.	Increase the upload limit for this log type. To do this, navigate to Site24x7, then go to Admin > AppLogs > Log Type, and select the desired log type. From there, you can adjust the Maximum Upload Limit (in GB) on the Edit Log Type page.
Files Not Found	Your log files don't match those in the directory provided in the log profile.	Provide a valid file path. For a static file path such as /var/log/tomcat/localhost.2024-04-29.log or /var/log/tomcat/localhost.2024-04-30.log, where a date field such as '2024-04-29' or '2024-04-30' is appended to the file name, the log profile path should be specified as /var/log/tomcat/localhost.*.log.
Recent Files Not Found	Our agent is only able to collect logs from the files that were modified within the last 24 hours.	This informational message indicates that we have collected the latest logs and no additional logs are available for collection.
Empty File	You might have configured an empty log file.	Provide a valid file.
Log Pattern Mismatch	The configured log pattern might not match the file content.	If the log lines are correct, reconfigure your pattern. If the configured log pattern is correct but the log files are wrong, then configure a proper log file for the log profile(s).  If you need assistance in log pattern configuration, reach out to support@site24x7.com.
Permission Denied	The agent doesn't have read permission for the configured log files.	Provide read permission to the configured log files.
Monitor is down	If the "Monitor is down," there will be no communication with the agent, and no logs will be collected.	If the monitor experiences temporary downtime, logs will be collected again once the monitor is up.  If the monitor is down permanently,  users can remove the monitor from the log profile.To do this, navigate to Site24x7, then go to Admin > AppLogs > Log Profile, and select the desired log profile. In the Edit Log Profile page,  deselect the monitor from the "Associate this log profile with these servers" drop-down.
No status		If you are encountering errors without a specified reason, send the agent logs of the server to support@site24x7.com for further analysis. For Windows, you can find the agent logs in the following folder path: C:\Program Files (x86)\Site24x7\WinAgent\monitoring\logs  For Linux, the logs can be found in /opt/site24x7/monagent/logs

If you encounter a log collection error with Windows Event Logs, refer to this document for troubleshooting steps.

You can set up notifications to alert you if log collection stops for any of the configured log types on your account servers. Refer to this document for more information.

If you need further assistance in solving log collection errors, please reach out to support@site24x7.com.

• Related Articles

• How do I disable log collection for individual log type

  Let's say you're collecting logs from different sources like Windows event logs, SQL server logs, and Cassandra logs. If you notice that you're reaching the log upload limit for the month you can choose to disable collection for one of the log types, ...

• How do I disable the AppLogs agent (process/service)?

  When you disable the AppLogs agent, log collection on that server will stop and the AppLogs Agent service/process will not run in your server. To disable the AppLogs agent: Navigate to the Server tab. Click on the server monitor in which the agent ...

• How to limit log uploads from a particular log type?

  Use case: As a sysadmin, you may want to check a specific log type that you upload and manage using Site24x7 AppLogs. Assuming that the upload limit of your account is 100 GB and there are four types of logs managed on a single account, keeping an ...

• Configuring voice calls and SMS alerts for AppLogs

  For the AppLogs Alerts that you configure in the AppLogs tab, you can set up email, SMS, voice calls, and instant messenger alerts at the monitor level. For example, if you want to configure email or voice call alerts for your Syslog monitor, edit ...

• Licensing for AppLogs Alerts

  Every log type is treated as a monitor and any search query can be configured for alerting. Here's the number of search queries for which you can configure to receive alerts for free:  Log size Number of free search queries 10GB 5 ≤ 100GB 10 ≤ 500GB ...