What Do I Do If LTS Cannot Collect Logs After I Configure Host Log Ingestion?

If LTS cannot collect logs after log ingestion has been configured for the host, perform the following operations:

• Wait for 1 to 5 minutes if you just completed configuring the ingestion. It takes a moment before log reporting begins.
• Check whether the host collection path has been added to more than one log stream. If it has, modify the configurations so a host path is configured in only one log stream.
• Check whether the host collection path has been configured in AOM. If a collection path has been configured in AOM, do not configure it in LTS.
• Check whether any ingestion settings are improper by referring to Ingesting ECS Text Logs to LTS.
• If the issue persists after you have tried the methods above, create a service ticket.