Hosted collector not capturing logs after collector name change



  • Avatar
    Kevin Keech

    Changing the name of the Collector or a Source should not affect the collection of logs, but it will change the metadata assigned to any logs received so you will need to make sure and change any queries that use _collector=<name> or _source=<name> to ensure they use the new collector name otherwise you may not get any results. 

    Comment actions Permalink
  • Avatar
    Andrew Angelopoulos

    I think I have a similar or the same questions. Turns out we have misnamed name value in the same name was used multiple times.

    I have both removed the name key/value pair and tried a new name (the real host name),

    It does not appear as a new collector, even after a restart of the service or a reboot of the system.


    Comment actions Permalink

Please sign in to leave a comment.