forward ingested records to new relic
Hi,
How can I forward each row from an ingested IIS log into new relic ?
I have set up a scheduled search and Webhook to do this, but right now I am seeing each record appear twice in new relic. (each copy of a row has a different search URL in new relic).
I can't set the time range for the search or the schedule below 15 minutes. I am wondering if this is a reason I get duplicates.
Also I have set the search_results field in the payload to "RawResultsJson", but the docs say this is limited to 10 records, which might be exceeded in future.
What is the best practice for ensuring that each record from a log source is reliably forwarded once to new relic ?
Thanks,
Ian
-
Official comment
Hi Ian - I will reach out to you directly, but I researched this further and it doesn't appear to be anything with your configuration. We're researching on our end and will keep you posted.
Thanks,
Nick
Customer Success, Sumo LogicComment actions
Please sign in to leave a comment.
Comments
1 comment