Ingest Logs from OCI Compute Instance
Use this automated flow to collect host logs from your OCI Compute instance to capture audit events, secure logs, syslog messages, cron activity, package updates, sudo commands, agent messages, and application files. This process makes it easy for you to correlate events across multiple instances.
The guided path using the Add Data wizard enables you to select the compute instances from which to collect logs, configure the Management Agent, and finalize the log collection settings.
Before you configure collection, make sure the logs you want to collect are readable on the compute instance. The agent can collect only the log files it has permission to access.
For steps to access Add Data wizard, see Use Add Data Wizard for Ingesting Logs. Under Monitor OCI resources, click OCI Compute Instances.
- Select all the OCI Compute instances from which you want to collect the logs.
- Oracle Cloud Agent is pre-installed on the OCI Compute instance when the instance is created. The guided path enables the Management Agent plug-in on Oracle Cloud Agent and deploys Oracle Log Analytics plug-in.
- The guided path verifies that the auto-created Oracle Log Analytics entities for each instance are available, and confirm that the entities are active.
- Select the log sources to use for parsing the logs collected from the compute instances.
- Select the log group compartment and log group name where the log data must be stored.
- At the end of setup, you can download a mapping file that connects each compute instance with its corresponding Oracle Log Analytics entity.