Why don't ingested logs look as expected?

Magda_Zarek — Thu, 30 Nov 2023 11:52:43 GMT

Your ingested logs might not look as expected, for example: the content is trimmed, the timestamp is correct but the processing rule doesn't seem to work.

The log ingest pipeline consists of several stages where logs are processed, checked against product characteristics and limits.

A log record contains warnings regarding issues that occurred in the log ingest and processing pipeline. Warnings are persisted and stored in dt.ingest.warnings attribute for each log record individually.

See the list and description of all possible log ingestion warnings.

article Why don't ingested logs look as expected? in Troubleshooting

Why don't ingested logs look as expected?