Splunk AppDynamics

"Request agent logs" is used to get future logs data? or can we use this to get past data?

Reethika
Path Finder

"Request agent logs" is used to get future logs data? or can we use this to get past data?

I need agent log file from last 2 days. How can I get it? using "Request Agent log Files"

Labels (1)
0 Karma
1 Solution

Atyuha_Pal
Contributor

Hi Reethika,

It creates agent.<Date_Time>.0.log which can grow max upto 20 MB and other agent related log files will be rolled up automatically. So if your agent is running continuously from  last 2 days  the log will be rolled up.

It will start collectiong logs once you click on the request button but there is no way to get the log for past 2 days as you can only configure the mode and the duration it should collect the log.

Hope it clarified your query.

Thanks,

Atyuha

View solution in original post

Atyuha_Pal
Contributor

Hi Reethika,

It creates agent.<Date_Time>.0.log which can grow max upto 20 MB and other agent related log files will be rolled up automatically. So if your agent is running continuously from  last 2 days  the log will be rolled up.

It will start collectiong logs once you click on the request button but there is no way to get the log for past 2 days as you can only configure the mode and the duration it should collect the log.

Hope it clarified your query.

Thanks,

Atyuha

Reethika
Path Finder

Hi Atyuha,

Thanks for the reply.

So only way to get logs of past data is on deployed application environment??

In agent folder>>agent.log file

??

0 Karma

Peter_Holditch
Builder

Reethika,

To be clear, using the "request agent log files" facility in the controller UI will retrieve all the agent log files stored by the agent, not just log messages written after the request is made.

What Atyuha is saying, however, is that because the agent rolls its log files to ensure they only consume a finite amout of disk space there is no absolute guarantee that ALL information logged by the agent over the previous 2 days will be available since (depending on the volume of data that has been logged) the logs may have rolled.

Warm regards,
Peter

Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...