Create a child log policy

Refine an existing log policy to focus on a subset of CIs or services by creating a child policy.

始める前に

Role required: agent_client_collector_admin

このタスクについて

A published log policy (the parent policy) can be used as a template for creating a new log policy (the child policy). You can customize the parameters that the child policy inherits from the parent to focus on a subgroup of its CIs or services.

The child policy inherits parameters from its parent policy that are modified after the child policy's creation, unless you disable this option in the child policy. You can choose to review these modified parameters in draft mode in each child policy before accepting them.

注:

The child policy is inherently more specific than its parent policy. When Agent Client Collector matches a condition defined in the child policy, it will not try to match the parent policy.

手順

1. Navigate to All > ACC Log Analytics > ACC Log Policies.
2. On the Policies page, select a published policy with a Hierarchy value of either None or Parent.
3. Select Create Child.
   A new policy opens with the same parameters as the published policy. The name of the new policy is <Policy name><date and time created>.

   For example, MySQL DB on Linux Logs 2022-02-13 04:44:12.

   The following fields are read-only:

   表 : 1. Child policy fields

   Field	Value
   Publish status	Draft
   Hierarchy	Child
   Parent	<Name of the parent policy>

   The Order field value indicates the priority by which the agent attaches itself to the child policy in relation to its sibling policies. A lower number indicates a relatively higher priority for this child policy. By default, each new child policy takes on a higher value (and hence, a lower priority) than the one preceding it. You can modify the order value as needed.

4. Customize the child policy's parameters.
   For a description of the parameters, see Create an Agent Client Collector log policy.
5. Select Save to create the child policy.
6. オプション: Select Disable inherit option to disable automatically inheriting modified parameters from the parent policy.
7. Select Publish to publish the child policy.

タスクの結果

The child policy is published and appears on the Child Policies tab of the parent policy.