Overview

Configure Log Sources in observIQ

What is a Source?

A Source is a preconfigured parsing pipeline designed to gather, parse, and enrich logs from popular technologies.

Sources are simple in design, minimizing the configuration and effort necessary to ship logs to observIQ.

Sources are Added to agents or Templates .

Supported Platforms

Source

Windows

Linux

Mac

Kubernetes

Openshift

Aerospike

Apache Cassandra

Apache HBase

Apache HTTP Server

Apache Hadoop

Apache Kafka

Apache Tomcat

Apache Zookeeper

AWS Cloudwatch

Azure Event Hub

Azure Log Analytics

Cisco ASA

Cisco Meraki

CodeIgniter Log Parser

CouchDB

Couchbase

CSV

Custom

Docker Swarm

File

Elasticsearch

JBoss

Journald

JSON

Kubernetes

MacOS

MariaDB

Memcached

Microsoft Active Directory

Microsoft IIS

Microsoft SQL Server

MongoDB

MySQL

Netflow

NGINX

NGINX Ingress Controller

Openshift

Oracle Database

PgBouncer

PostgreSQL

RabbitMQ

Redis

RSyslog

SAP HANA

Sflow

Syslog

Syslog-NG

Tail

Ubiquiti

uWSGI Log Parser

VMware ESXI

VMware vCenter

Windows DHCP

Windows Event Log


What’s Next