ACC data input configuration fields
Summarize
Summary of ACC Data Input Configuration Fields
The ACC data input configuration form is designed for setting up and managing data inputs that stream logs to a selected MID Server. It includes essential configuration fields necessary for effective log management, ensuring seamless operation and data integrity.
Show less
Key Features
- MID: Selects the MID Server for log streaming. Only one ACC data input is allowed per MID Server, and it must support AgentClientCollector capability. The maximum data inputs for a MID Server is typically 10, but one ACC input can be added, totaling 11.
- Port: Specifies the active port on the MID Server for log streaming, which must be secured by the organization’s security team. The system updates the Agent Client Collector with new port configurations seamlessly.
- Description: Provides a description of the data input, including read-only fields such as Name, Status, Transport, Sources count, Disabled since, Last log time, and Error message for error tracking.
Advanced Configuration Options
- Look up hostnames: Option to perform DNS lookups for IP resolution (default: false).
- Use SSL: Enables secure communication (default: true).
- Client inactivity timeout: Sets a timeout for inactive channels (default: 15 seconds).
- Worker thread count: Defines the number of threads for handling incoming data (default: 4).
- Default time zone: Specifies the default time zone for events (default: GMT).
- Sub sample drop/receive ratio: Controls the event drop and receive ratios (default: -1 for both).
- Max length in bytes: Limits log message length (default: 32,766 bytes).
- Character encoding: Specifies encoding format (default: UTF-8).
- Drop if queue is full: Option to discard logs when the queue is full (default: false).
Key Outcomes
By configuring the ACC data input fields, ServiceNow customers can ensure efficient log management, maintain data integrity, and optimize the performance of their MID Servers. Proper setup allows for effective monitoring and troubleshooting of log streaming processes, enhancing overall system reliability.
Description of the fields on the ACC data input configuration form.
| Field | Description |
|---|---|
| MID | The MID Server to which the logs stream. Note: This field is required.
|
| Port | The port on the MID Server. The port must be configured and active. It must not be occupied by another process. Make sure that your organization’s security team opens the port before you assign it. Note: When you update the port, the system updates the Agent Client Collector with the new port configuration. Log
streaming continues seamlessly without log loss after 1-3 minutes. |
| Description | Description of the data input. |
The fields in the following table show read-only information.
| Field | Description |
|---|---|
| Name | The name of the data input: Agent Log Analytics. Note: All ACC data inputs
have the same name. You can identify an ACC data input by the name of the MID Server that is defined for it. |
| Status | The status of the data input. |
| Transport | The protocol used to send the log data. The ACC data input sends data using a ServiceNow Agent. |
| Sources count |
The total number of log sources originating from all ACC data inputs together. This feature is supported in the Health Log Analytics application, Version 22.0.12 - December 2021 and later, available from the ServiceNow Store. |
| Disabled since | The time when the data input stopped or failed. |
| Last log time | The time when the last log streamed in the data input. |
| Error message | The streaming error. This field is populated automatically. It displays only when a streaming error has occurred. |
| Field | Description | Default value |
|---|---|---|
| Look up hostnames | Option for selecting to perform DNS lookup to resolve IPs to hostnames. | false |
| Use SSL | Option for selecting to use SSL. | true |
| Client inactivity timeout (sec) | The timeout, in seconds, to close an inactive channel. | 15 |
| Worker thread count | The number of threads that handle incoming data. | 4 |
| Default time zone | The default time zone of events. The system uses this default when the log does not specify a time zone. | GMT |
| Sub sample drop ratio | The ratio of events to drop. | -1 |
| Sub sample receive ratio | The ratio of events to receive. | -1 |
| Max length in bytes | The maximum length of log messages, in bytes. | 32,766 |
| Character encoding | The character encoding for this data input. | UTF-8 |
| Drop if queue is full | Option for selecting to discard logs if many processes are waiting in the queue to access the MID Server. | false |