Splunk AppDynamics

"Request agent logs" is used to get future logs data? or can we use this to get past data?

Reethika
Path Finder

"Request agent logs" is used to get future logs data? or can we use this to get past data?

I need agent log file from last 2 days. How can I get it? using "Request Agent log Files"

Labels (1)
0 Karma
1 Solution

Atyuha_Pal
Contributor

Hi Reethika,

It creates agent.<Date_Time>.0.log which can grow max upto 20 MB and other agent related log files will be rolled up automatically. So if your agent is running continuously from  last 2 days  the log will be rolled up.

It will start collectiong logs once you click on the request button but there is no way to get the log for past 2 days as you can only configure the mode and the duration it should collect the log.

Hope it clarified your query.

Thanks,

Atyuha

View solution in original post

Atyuha_Pal
Contributor

Hi Reethika,

It creates agent.<Date_Time>.0.log which can grow max upto 20 MB and other agent related log files will be rolled up automatically. So if your agent is running continuously from  last 2 days  the log will be rolled up.

It will start collectiong logs once you click on the request button but there is no way to get the log for past 2 days as you can only configure the mode and the duration it should collect the log.

Hope it clarified your query.

Thanks,

Atyuha

Reethika
Path Finder

Hi Atyuha,

Thanks for the reply.

So only way to get logs of past data is on deployed application environment??

In agent folder>>agent.log file

??

0 Karma

Peter_Holditch
Builder

Reethika,

To be clear, using the "request agent log files" facility in the controller UI will retrieve all the agent log files stored by the agent, not just log messages written after the request is made.

What Atyuha is saying, however, is that because the agent rolls its log files to ensure they only consume a finite amout of disk space there is no absolute guarantee that ALL information logged by the agent over the previous 2 days will be available since (depending on the volume of data that has been logged) the logs may have rolled.

Warm regards,
Peter

Get Updates on the Splunk Community!

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...