Verify your log sources in Health Log Analytics
Verify that all your log sources are present and active after Health Log Analytics tagging has assigned a log to a service instance and components, and has automatically mapped the log to a source.
시작하기 전에
Role required: evt_mgmt_admin
프로시저
-
Navigate to All > Health Log Analytics > Data Input > Log Sources.
The Log Sources table provides information about the sources created when you mapped the streaming data. The table lists these sources by service instance.
Column Description Service instance The service instance. Service instances represent large or complete business processes. A single service instance can consist of multiple components, whereas different service instances can include the same components.
Component The components comprising the service instance. Components represent small technical parts or business processes. Typically, they represent Configuration Items (CIs). Several components are often clustered together in a single service instance.
Status The status of the log source: Active or Inactive. The Active status indicates that logs streamed into the system from this source in the last hour. Created The creation date and time of this log source. Last event time The last time logs streamed into the system from this source. - Make sure that the system has created all your log sources.
-
Verify the creation, status, and log samples of a specific source in the source record.
주:Because auto-mapping can map log data to multiple sources, be sure to verify this information per source.
-
If a log source is missing, add it.
- Navigate to Health Log Analytics > Data Input > Data Input Mapping.
-
Use the JavaScript function to manually map a log sample to the correct service instance, component, and source type.
For more information, see Map raw log data in Health Log Analytics.
- Navigate back to the Log Sources page and verify that the status of the new log source is Active.
The system creates a log source. -
Make sure that the status of all your log sources is Active.
If the status of a source is Inactive, double-click it and change it to Active manually.
- Select Update.