Hello,
We receive email alerts about every two hours. It is specified in these alerts that the logs "/var/log/syslog*" and "/var/log/auth*log*" cannot be retrieved. The logs are present and have normal rights. These alerts appeared after a major server upgrade. What is the best way to solve this problem?
Thank you in advance.
Mickaël
Greetings from Site24x7!
This is a new feature that triggers an alert if log collection does not occur for the specified log type. If the logs are collected without errors, you won't receive this notification.
A "Log Pattern Mismatch" error will occur if the configured log pattern does not match the file content.
We have recently added an additional log pattern for Syslog log type. To incorporate this pattern into your Syslog log type, follow these steps:
- Navigate to Admin > AppLogs > Log Types.
- Choose the Syslog log type that you created.
- Add the following pattern to the log profile.
$DateTime:date:yyyy-MM-dd'T'HH:mm:ss.SX$ $Host$ $Application$![$ProcessId$]!: $Message$
If you need assistance in log pattern configuration, reach out to support@site24x7.com.
Please refer to this document to troubleshoot log collection errors.
If you do not wish to receive log collection error alerts, please follow these steps:
- Go to Admin > Applogs > Settings.
- Set "No" for "Notify when Log Collection Stops."
Regards,
Site24x7 Team
You're welcome! Feel free to reach out if you have any more questions.