Loginjestion based on event channels
Summary: alangendijk references the LogicMonitor support documentation and highlights the flexibility in managing log storage based on the type of logs and their purpose. They inquire about the possibility of keeping different types of logs, such as security logs, in separate partitions by assigning event channels to log partitions. Currently, this can only be achieved at the group or resource level using the "tenant.identifier." alangendijk requests the development of a feature to enable this functionality.
In the support documentation https://www.logicmonitor.com/support/logs-partition#:~:text=Requirements%20for%20Creating%20Log,Resources%20Role%20Permissions.
There it says "For example, you can keep high-volume application logs for just a few days if they are only needed for short-term troubleshooting. At the same time, you can retain critical logs—like Windows audit or compliance logs—for several months. This flexibility enables you to manage log storage more efficiently and predictably."
What if you want to keep security logs in one partition and application and system log in another.
This means you need to be able to assign event channels to log partitions to do this.
Currently this can only be done on group or resource level with the "tenant.identifier"
Please develop such a feature.
Patrick Sites
·5 months agoWill be a feature in Partitions 2.0 and 2H delivery.