Updated on 2023-11-29 GMT+08:00

Step 3: Ingesting Logs to Log Streams

The following shows how you can ingest host logs to LTS.

When ICAgent is installed, configure the paths of host logs that you want to collect in log streams. ICAgent will pack logs and send them to LTS in the unit of log streams.

Prerequisites

  • You have created log groups and log streams.
  • You have installed ICAgent.

Procedure

  1. Log in to the LTS console and choose Log Ingestion in the navigation pane.
  2. Click ECS (Elastic Cloud Server) to configure log ingestion.
  3. Select a log stream.

    1. Select a log group from the drop-down list of Log Group. If there are no desired log groups, click Create Log Group to create one.
    2. Select a log stream from the drop-down list of Log Stream. If there are no desired log streams, click Create Log Stream to create one.
    3. Click Next: (Optional) Select Host Group.
      Figure 1 Selecting a log stream

  4. Select a host group.

    1. In the host group list, select one or more host groups to collect logs. If there are no desired host groups, click Create in the upper left corner of the list. On the displayed Create Host Group page, create a host group. For details, see section "Creating a Host Group (IP Address)".

      You can choose not to select a host group in this step, but associate a host group with the ingestion configuration after you finish the procedure here. There are two options to do this:

      • Choose Host Management in the navigation pane, click the Host Groups tab, and complete the association.
      • Choose Log Ingestion in the navigation pane, click an ingestion configuration, and make the association on the details page.
    2. Click Next: Configurations.
      Figure 2 Selecting a host group

  5. Configure the collection.

    Configure the collection parameters. For details, see section "Configuring Collection".

  6. (Optional) Configure structured logs.
  7. (Optional) Configure indexes.
  8. Click Submit Click Back to Ingestion Configurations to check the ingestion details. You can also click View Log Stream to view the log stream to which logs are ingested.