This page has moved to https://docs.logz.io/user-guide/log-shipping/built-in-log-types.html
Which log types are preconfigured on the Logz.io platform?
This page has moved to https://docs.logz.io/user-guide/log-shipping/built-in-log-types.html
Comments
6 comments
My IIS parser seems to be disabled. How do I enable it?
Hi Jose,
This is Josh from Logz.io support, our parsing wizard does not allow custom parsing built in log types. So either you can contact support at help@logz.io and request custom parsing for your IIS logs, or you can ship the logs with a different type like iis-custom and then you can use the data parsing wizard to parse those logs.
If you have any questions or issues you can also contact us via that chat icon in the bottom right of the application.
Hi Joshua,
It turned out that my IIS logs didn't match your pre-defined grok templates. You have four.
As I mentioned in my email to the support team, at first hand, it is virtually impossible for anyone to "guess" which fields you are looking for in a log entry.
I think you should come up with a blog post where you explain, maybe using screenshots of the IIS log configuration, which fields need to be selected because we don't have any visibility into your grok templates.
Aside from that, everything ran smoothly.
Thanks!
Hi Jose,
Thank you for your comments, our default IIS groks are built to match the default IIS log formats. The idea here is that if you are using the default logging format then the parsing will work, if not then you can contact support to have it custom parsed for you, we do not want you to change your log format to meet our default patterns, it's better that we custom parse the logs for you in that case :-)
As you can see our support is quick to reply and help with the custom parsing. I'm happy to see everything worked out for you.
Best Regards,
Josh
What type do I use for the standard OS syslog? I'm using Raspbian (Debian-based) and rsyslog. Most logs go to /var/log/syslog.
Hi Christopher,
This is Josh from support, we currently do not have any built-in parsing for os logs. So what you can do is set the type to whatever type makes sense to you, maybe "raspbian" and then you can use our data parsing wizard to parse the logs.
Please sign in to leave a comment.