Tomcat likes to rename site log files on a daily basis to something like SITE-yyyy-mm-dd.txt. This makes it problematic to search "the past 30 days" for events in these renamed log files.I could include all *.txt tomcat logs but that would result in multiple GB of data being processed all the time. When a bug is reported it's good to look back a few days to find out about it. The tomcat logs I'm talking about are like this:
SITE (current log file; we can see these in Sumo)
These historical log files for SITE_NAME go back to 2017, so I don't want Sumo to have to sift through all of them. So I have EXCLUDED *.txt files. But if I want, say, the last 15 days of logs, I have to include all these files or specify the dates using a regex or something.
So, is there some way to tell Sumo we want only the last 2 weeks, or last any specific time period, for these log files?
Please sign in to leave a comment.