How can I forward each row from an ingested IIS log into new relic ?
I have set up a scheduled search and Webhook to do this, but right now I am seeing each record appear twice in new relic. (each copy of a row has a different search URL in new relic).
I can't set the time range for the search or the schedule below 15 minutes. I am wondering if this is a reason I get duplicates.
Also I have set the search_results field in the payload to "RawResultsJson", but the docs say this is limited to 10 records, which might be exceeded in future.
What is the best practice for ensuring that each record from a log source is reliably forwarded once to new relic ?
Please sign in to leave a comment.