ACC data input configuration fields
Description of the fields on the ACC data input configuration form.
| Field | Description |
|---|---|
| MID | The MID Server to which the logs stream. Remarque : This field is required.
|
| Port | The port on the MID Server. The port must be configured and active. It must not be occupied by another process. Make sure that your organization’s security team opens the port before you assign it. Remarque : When you update the port, the system updates the Agent Client Collector with the new port configuration. Log
streaming continues seamlessly without log loss after 1-3 minutes. |
| Description | Description of the data input. |
The fields in the following table show read-only information.
| Field | Description |
|---|---|
| Name | The name of the data input: Agent Log Analytics. Remarque : All ACC data inputs
have the same name. You can identify an ACC data input by the name of the MID Server that is defined for it. |
| Status | The status of the data input. |
| Transport | The protocol used to send the log data. The ACC data input sends data using a ServiceNow Agent. |
| Sources count |
The total number of log sources originating from all ACC data inputs together. This feature is supported in the Health Log Analytics application, Version 22.0.12 - December 2021 and later, available from the ServiceNow Store. |
| Disabled since | The time when the data input stopped or failed. |
| Last log time | The time when the last log streamed in the data input. |
| Error message | The streaming error. This field is populated automatically. It displays only when a streaming error has occurred. |
| Field | Description | Default value |
|---|---|---|
| Look up hostnames | Option for selecting to perform DNS lookup to resolve IPs to hostnames. | false |
| Use SSL | Option for selecting to use SSL. | true |
| Client inactivity timeout (sec) | The timeout, in seconds, to close an inactive channel. | 15 |
| Worker thread count | The number of threads that handle incoming data. | 4 |
| Default time zone | The default time zone of events. The system uses this default when the log does not specify a time zone. | GMT |
| Sub sample drop ratio | The ratio of events to drop. | -1 |
| Sub sample receive ratio | The ratio of events to receive. | -1 |
| Max length in bytes | The maximum length of log messages, in bytes. | 32,766 |
| Character encoding | The character encoding for this data input. | UTF-8 |
| Drop if queue is full | Option for selecting to discard logs if many processes are waiting in the queue to access the MID Server. | false |