We have been seeing an issue where new sources are not getting picked up by the collectors (both via Chef and manual installation). I thought I had tracked it down to the fact that we were not defining the syncSources parameter in our user.properties file, however I added it to the file like so:
Once that was added I restarted the collector service, however it is not picking up the new source I added to /etc/sumo.json:
~# ll /etc/ | grep sumo
-rw-r--r-- 1 root root 1674 Nov 20 21:19 sumo.json
"sourceType" : "LocalFile",
"name" : "Kernel Log",
"pathExpression" : "/var/log/kern.log",
Has anyone run into similar issues? I'm tearing my hair out over this.
Please sign in to leave a comment.