diff --git a/docs/send-data/installed-collectors/sources/local-file-source.md b/docs/send-data/installed-collectors/sources/local-file-source.md index ab5ec84735..0d869824aa 100644 --- a/docs/send-data/installed-collectors/sources/local-file-source.md +++ b/docs/send-data/installed-collectors/sources/local-file-source.md @@ -91,6 +91,7 @@ When the Sumo collector accesses a log file to read its content, the collector o * ![orange exclamation point.png](/img/reuse/orange-exclamation-point.png) An orange triangle with an exclamation point is shown when the field doesn't exist in the Fields table schema. In this case, an option to automatically add the nonexistent fields to the Fields table schema is provided. If a field is sent to Sumo that does not exist in the Fields schema it is ignored, known as dropped. 1. Set any of the following options under **Advanced**: +Advanced options for log * **Denylist.** Enter the path for files to exclude from the Source collection. Wildcard syntax is allowed when specifying unwanted files. For example, if you are collecting` /var/log/*.log` but don’t want to collect `unwanted*.log`, then specify `/var/log/unwanted*.log`. You can also exclude subdirectories, for example, if you are collecting` /var/log/**/*.log` but do not want to collect anything from `/var/log/unwanted `directory, specify `/var/log/unwanted`. You do not need to denylist compressed files that end with the file extensions tar, bz2, gz, z, zip, jar, war, 7z, rar, exe, dll, xz, or /var/log/(lastlog\|btmp\|wtmp) binary files. Sumo Logic, automatically excludes these compressed file extensions when collecting data.  tar.gz files are supported * **Enable Timestamp Parsing.** This option is selected by default. If it's deselected, no timestamp information is parsed at all. diff --git a/docs/send-data/installed-collectors/sources/remote-file-source/index.md b/docs/send-data/installed-collectors/sources/remote-file-source/index.md index fb4c534a98..3f6987063a 100644 --- a/docs/send-data/installed-collectors/sources/remote-file-source/index.md +++ b/docs/send-data/installed-collectors/sources/remote-file-source/index.md @@ -5,8 +5,9 @@ description: You can collect file tail data from a remote system using SSH. --- import CollBegin from '../../../../reuse/collection-should-begin-note.md'; +import useBaseUrl from '@docusaurus/useBaseUrl'; -Log files collected using a Remote File Source must be encoded in UTF-8 or ASCII. If you are editing a Source, metadata changes are reflected going forward. Metadata for previously collected log data will not be retroactively changed. +If you are editing a Source, metadata changes are reflected going forward. Metadata for previously collected log data will not be retroactively changed. Sumo Logic scans remote directories every 30 seconds. @@ -50,9 +51,7 @@ To configure a Remote File Source: ![remote file source credential input.png](/img/send-data/remote-file-source-credential-input.png) 1. Set any of the following under **Advanced.** - - ![Local File UI June 2021.png](/img/send-data/Local-File-UI.png) - +Advanced options for log * **Denylist.** Optional. Add any files to be excluded by including one or more path expressions separated by commas. Note that this field takes a maximum of 10240 characters. * **Enable Timestamp Parsing.** This option is selected by default. If it's deselected, no timestamp information is parsed at all. * **Time Zone.** There are two options for Time Zone. You can use the time zone present in your log files, and then choose an option in case time zone information is missing from a log message. Or, you can have Sumo Logic completely disregard any time zone information present in logs by forcing a time zone. It's very important to have the proper time zone set, no matter which option you choose. If the time zone of logs cannot be determined, Sumo Logic assigns logs UTC; if the rest of your logs are from another time zone your search results will be affected. diff --git a/static/img/send-data/advanced-options-local-file-source.png b/static/img/send-data/advanced-options-local-file-source.png new file mode 100644 index 0000000000..7938262a7c Binary files /dev/null and b/static/img/send-data/advanced-options-local-file-source.png differ diff --git a/static/img/send-data/advanced-options-remote-file-source.png b/static/img/send-data/advanced-options-remote-file-source.png new file mode 100644 index 0000000000..fb2e5484ec Binary files /dev/null and b/static/img/send-data/advanced-options-remote-file-source.png differ