forward ingested records to new relic

Follow

Ian Tory

• October 26, 2018 09:56

Hi,

How can I forward each row from an ingested IIS log into new relic ?

I have set up a scheduled search and Webhook to do this, but right now I am seeing each record appear twice in new relic. (each copy of a row has a different search URL in new relic).

I can't set the time range for the search or the schedule below 15 minutes. I am wondering if this is a reason I get duplicates.

Also I have set the search_results field in the payload to "RawResultsJson", but the docs say this is limited to 10 records, which might be exceeded in future.

What is the best practice for ensuring that each record from a log source is reliably forwarded once to new relic ?

Thanks,

Ian

0

• Official comment

  

  Nick Wilson

  • November 01, 2018 20:43

  Hi Ian - I will reach out to you directly, but I researched this further and it doesn't appear to be anything with your configuration. We're researching on our end and will keep you posted.

  Thanks,
  Nick
  Customer Success, Sumo Logic

  Permalink

Please sign in to leave a comment.