File

Configure File Log Source with observIQ

Supported Versions

  • The File Source allows you to read logs from any generic file
  • Supports the following encodings:
    • nop
    • utf-8
    • utf-16le
    • utf-16be
    • ascii
    • big5

Configuration

Option

Description

File Path

Use this field to specify an array of file log path glob patterns.

Exclude File Path

Use this field to specify an array of file log path glob patterns 'to be excluded'.

Poll Interval

Use this field to set the duration between filesystem polls. The default is 200ms.

Enable Multiline

Toggle check box to enable/disable parsing of Multiline log files.

Multiline Start Pattern

Choose a Regex pattern to match with the start of a line.

Encoding

Choose the encoding of the log file.

Start At

Choose whether to start reading from the beginning or end of a file with "end" being the default.

Type

Use this field to add the specified 'Type' as a label to each log message.

Log Types

Types

file

Advanced

For more information on the advanced configuration capabilities, see our detailed plugin guide here.