Log Sources define where the log files are located when you use management agent for collection, and how to parse and enrich the logs while ingesting them, irrespective of the method of ingestion. Oracle Logging Analytics has hundreds of sources for database, applications, and infrastructure of both Oracle origin and non-Oracle origin. See Oracle-Defined Sources.
You can customize the Oracle-defined content by adding your own elements to them. When Oracle updates the Oracle-defined sources, you will continue to get those updates while at the same time keeping your customizations.
If you don't find an Oracle-defined source that suits your requirement, then you can create your own. When creating a source, you will need to pick one or more parsers to parse the log file into log entries and to break the log entry into fields. You can create a custom source and use an Oracle-defined parser if there is already one that matches your log format. If there is no Oracle-defined parser for your custom source, you can create a custom parser as well. See Create a Parser.
To perform other actions on the source, open the navigation menu and click Observability & Management. Under Logging Analytics, click Administration. The Administration Overview page opens. The administration resources are listed in the left hand navigation pane under Resources. Click Sources. The Sources page opens.
In the Sources page, select the source Compartment, Creation Type, Entity Type, and Association Type for your source in the Filters section. After identifying your source, click Actions icon in the row of your source:
View Details: The source details page is displayed. View the details of the source and edit, if required.
Copy Identifier: The identifier of the source is copied to the clipboard.
Edit: The Edit Source dialog box is displayed. You can modify the properties of the source here.
Upload Files: The on-demand upload page opens. You can upload log files that can use this source definition. See Upload Logs on Demand.
Duplicate: Click this if you want to create a duplicate of the existing source, after which you can modify the duplicate to customize it.
- Export Definition: If you are using Oracle Logging Analytics in multiple regions, then you can export and re-import your source configuration content. You can also use this if you want to store a copy of your definitions outside of Oracle Logging Analytics. See Import and Export Configuration Content.
View in Log Explorer: The Log Explorer opens. The displayed logs are filtered for this source.
Delete: You may have to delete some of your old or unused sources to conform to the service limits of Logging Analytics. See Limits by Service in Oracle Cloud Infrastructure Documentation. To delete the parser, confirm in the Delete Source dialog box. You can delete a user-created source only if it has no associated entities.