You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
29 lines
1.1 KiB
29 lines
1.1 KiB
# Copyright (C) 2005-2024 Splunk Inc. All Rights Reserved.
|
|
# This package contains packages specifically built for the ITSI app implementations
|
|
|
|
"""
|
|
ITSI Logger Standard
|
|
For more info refer to:
|
|
https://confluence.splunk.com/display/~szhou/ITSI+Logging+System+Refactoring#ITSILoggingSystemRefactoring-LogStandardization
|
|
|
|
The ITSI log files are organized by processes. There are 3 types of processes:
|
|
|
|
Modular Inputs:
|
|
the log files are in path $SPLUNK_HOME/var/log/splunk/<source_type>-<name>.log,
|
|
e.g.itsi_backfill-backfiller.log is the log file for modular input with stanza
|
|
definition [itsi_backfill://backfiller] .
|
|
|
|
Search Command:
|
|
The log files are in path $SPLUNK_HOME/var/run/splunk/dispatch/<search_id>/search.log.
|
|
User can open the log by going to Job Inspector to open search.log.
|
|
|
|
ITSI RESTful Services:
|
|
The log file is $SPLUNK_HOME/var/log/splunk/itsi_service.log since all these components
|
|
are in one process
|
|
|
|
Others python processes:
|
|
The log files are in path $SPLUNK_HOME/var/log/splunk/itsi_<python_file>.log.
|
|
e.g. itsi_event_generator.log.
|
|
|
|
"""
|