Page 4 of 4

Re: Logs not reporting again

Posted: Sun Oct 16, 2016 8:04 pm
by kwhogster
Hello Every One

Please Lock this mark as closed.

The CentOS would not let me expand the drive

Would not let me install lvm2 using yum

Even adding another drive to the VM and I ran fdisk it failed also

I think not having any disk space left causes these issues.

I even tried deleting the log files etc.

I am now in the process of building a new Vm and this time will give it more disk space

How does NLS clear the files ? Or does it just eat up all your disk space?

Thanks

Re: Logs not reporting again

Posted: Mon Oct 17, 2016 10:02 am
by rkennedy
Will close this one up, but first - let me answer your question.
How does NLS clear the files ? Or does it just eat up all your disk space?
You can configure NLS to delete log data after x days, which is how it would clean up data off the machine. For some clients, yes, it will eat up all the disk space because they need to retain it forever.

Let me know if we're good to lock this up following my response.

Re: Logs not reporting again

Posted: Tue Oct 25, 2016 7:52 pm
by kwhogster
Guys

Got the server rebuilt

Troy your instructions to show the hosts

Go to Dashboards
Make sure the query is *
Under ALL EVENTS, in the left pane is a Fields list
Click the word host
Now there is a pretty list
Click the Terms drop down list and select Table
Now a "Top 10 terms" table appears
Next to the heading "Top 10 terms in field host" is a compass icon
Drag the compass icon up so it adds it to a new panel
In the new panel, click the gear icon (Configure)
General tab -> change the title to All Hosts
Panel tab -> Change the length from 10 to 1000
Click Save

Now you can save this dashboard so you can view it later.


I do this
Go to Dashboards
Make sure the query is *
Under ALL EVENTS, in the left pane is a Fields list
Click the word host
Now there is a pretty list

NO PRETTY LIST

This is after the Log Server cam up for the first time

It shows 12 hosts reporting


For Rkennedy
How or where do I configure NLS to clear the logs

Re: Logs not reporting again

Posted: Tue Oct 25, 2016 10:21 pm
by Box293
My steps might not be in the correct order, try this:

Go to Dashboards
Make sure the query is *
Under ALL EVENTS, in the left pane is a Fields list
Click the word host
A small window appears overlaid on the screen
Click the Terms drop down list and select Table
Now a "Top 10 terms" table appears
Next to the heading "Top 10 terms in field host" is a compass icon
Drag the compass icon up so it adds it to a new panel
In the new panel, click the gear icon (Configure)
General tab -> change the title to All Hosts
Panel tab -> Change the length from 10 to 1000
Click Save

Re: Logs not reporting again

Posted: Wed Oct 26, 2016 7:10 am
by kwhogster
Troy

That worked thanks Now I have a saved dash board with the list of hosts


My only open question now is


How does NLS clear the files ? Or does it just eat up all your disk space?

And Rkennedy responded with this

You can configure NLS to delete log data after x days, which is how it would clean up data off the machine. For some clients, yes, it will eat up all the disk space because they need to retain it forever.


My question is where are these settings

Thanks

Re: Logs not reporting again

Posted: Wed Oct 26, 2016 9:04 am
by mcapra
kwhogster wrote:How does NLS clear the files ? Or does it just eat up all your disk space?
NLS uses curator on the back-end to manage the elasticsearch indices.
kwhogster wrote:My question is where are these settings
The settings related to retention can be found under Administration -> Backup & Maintenance.

In a nutshell:
  • Open indices, cached to RAM, searchable
  • Closed indices, stored on Disk, not searchable
  • Deleted indices, gone forever unless stored in a backup/snapshot

Re: Logs not reporting again

Posted: Wed Oct 26, 2016 7:45 pm
by kwhogster
Thanks

Made the changes

Now just need to keep eye on this for a week or so

Re: Logs not reporting again

Posted: Thu Oct 27, 2016 9:36 am
by mcapra
Sure thing! Let us know if there's any developments :)

Re: Logs not reporting again

Posted: Wed Nov 02, 2016 9:46 pm
by kwhogster
Guys.

We can Lock this one now as resolved.

Seems to be holding steady on the storage.

Than :D ks again

Re: Logs not reporting again

Posted: Thu Nov 03, 2016 9:36 am
by avandemore
Great, I'll lock this now. If you have further problems please open new thread.