topic Re: Change External Logging Endpoint On OneAgent in Log Analytics

Change External Logging Endpoint On OneAgent

A1 — Wed, 02 Oct 2024 17:42:37 GMT

Hello,

Is it possible to change the outbound log endpoint on the OneAgent? Lets say I want to send logs to an external observability pipeline first (not DT openPipeline) is that possible or is everything forced to activegates or saas? I'm sure I could do this with fluent but if I can I don't want to add an agent.

Re: Change External Logging Endpoint On OneAgent

StrangerThing — Wed, 02 Oct 2024 17:47:07 GMT

We've done something similar by having our code utilize Serilog to send some logs to other destinations. I'm not sure if this can be done for logs the OneAgent is already ingesting though. Looking forward to hearing if this is possible.

Re: Change External Logging Endpoint On OneAgent

Peter_Youssef — Wed, 02 Oct 2024 20:28:14 GMT

Hi @A1

Let's go through your concern sequentially if you're talking about Oneagent log directory, assume it's a Linux server:

The installed oneagent will have all directories stored locally as long as the server isn't connected to external NAS storage.
If you need for example to mount your installation or log directory to external mount point you have to ensure that this directory is accessible from the server, as if you're configuring cluster backup..
As per the attached example you can check if it this fits for your case or not.

Second point:

If you need to send the Logs as you have described to another observability pipeline you should ensure that the target platform supports logs ingestion from external sources for further processing and analysis.
Ensure that you can ingest these logs through the observability pipeline creating post request through Rest API, if it's similar to the way of log ingestion into Dynatrace.
I believe It won't be practical or best practice for example to install another observability solution component to extract and process Dynatrace Oneagent Logs.

You can validate as per your description on UAT or staging server monitored by Oneagent and ensure that such pipeline observability platform is reachable from the monitored host and start ingesting the OA logs for analysis.

Regards,

Peter.

Re: Change External Logging Endpoint On OneAgent

A1 — Thu, 03 Oct 2024 02:33:34 GMT

Peter,

What I am tryin to do is see if the OneAgent can be configured to send logs to something other than the DT saas. For example, how do I tell the OneAgent that is taking in logs to send to https://myloggingdomain.com instead of the saas tenant.

Re: Change External Logging Endpoint On OneAgent

Julius_Loman — Thu, 03 Oct 2024 06:38:05 GMT

@A1 No, collecting logs using OneAgent and sending them to a destination other than Dynatrace is not possible.

Can you give reasons why would you want to do that? Having logs with other observability signals and having them connected (log to trace for example) in a single platform is one of the most important benefits for Dynatrace users.

Re: Change External Logging Endpoint On OneAgent

A1 — Thu, 03 Oct 2024 19:58:47 GMT

They would still make it to Dynatrace we just have external observability pipelines. I wanted to know so I could potentially avoid using another agent but seems its not possible. Thanks

Re: Change External Logging Endpoint On OneAgent

StrangerThing — Fri, 04 Oct 2024 13:07:45 GMT

Can you pick them up from Dynatrace and then send to your external pipeline? Seems like maybe a better solution rather than having multiple agents consuming the same logs on the same host.