Manual Chapter :
CE file for Modifying event log
indices
Applies To:
Show Versions
BIG-IQ Centralized Management
- 7.0.0
CE file for Modifying event log
indices
The
Indices
settings specify the physical characteristics of how the data collection device manages
your data. The DCD stores data coming in from BIG-IP devices in a data index. As data is
received, it accumulates in the current index. When the accumulated data reaches the
rotation threshold you set, four things happen.- A new current index is created.
- BIG-IP data begins accumulating in the new index.
- The former current index becomes one of the retained indices.
- If the total number of indexes is now larger than the retained index count, the oldest one is dropped.
The ideal log indices configuration depends on the flow of
data your devices send to the DCD. Use the rotation type that best suits your
business needs.
- On the left, expandBIG-IQ Data Collection Devices.
- Click theSettingsbutton.The Settings screen opens to display the current state of the DCD cluster defined for this BIG-IQ device.
- On the Settings screen, clickLogging Data Collection.The screen displays the settings defined for the services that are configured to send alerts and events to your DCD cluster.
- Specify theRotation Type.
- To chunk your data based on the amount of data:
- SelectSize Based
- For theMax Index Size, type the size of the indexes you want to create.
For example, if you type1000, when the index size reaches 1 GB, it becomes a retained index and new data from your BIG-IP begins accumulating in a new current index. If yourRetained Index Countis set to 10, then the maximum disk space used by these indexes will be approximately 10 GB. - To chunk your data based on the increments of time:
- Select Time Based
- For theRotation Period, specify a time unit, and type how many of those units you want to comprise indexes you want to create.
For example, if you type.5and selectHours, a new index is created every half hour. If yourRetained Index Countis set to 10, then each retained index will contain approximately 5 hours of data.
- For theRetained Index Count, type the total number of indices you want to store on the DCD.This setting determines the maximum amount of data stored on the DCD. When this limit is reached, the oldest data is truncated or discarded. For example, if you set the number of indices to 10 and each index is 1 GB, then you must have 10 GB of storage available on your DCD.
- Analyze the DCD cluster details listed in the Summary Status area and make sure that the values after upgrade match the values from the health check you performed before the upgrade.
- Cluster Node Count
- Data Node Count
- Document Count
This information provides a fairly detailed overview that describes the DCD cluster you have created to store alerts and event log data. - ClickSave & Closeto save the indices configuration settings.
