Our client is getting log analytics licensing and I have a few questions:
In case the client doesn't provide an external NFS volume to store log files, Dynatrace Managed will get them from the hosts? it won't store any log data on Dynatrace Server? Do we need any additional storage on Dynatrace server for log analytics?
Where are the logs files store when you click download log on WebUI console?
When using NFS volume, does Dynatrace get the log files from the hosts and send them to NFS volume? or the client has to configure the hosts to store log files on the NFS volume?
The free tier of log analytics pulls from the host only. Upgrading your license means you can use a centralized location (the NFS mount point available on your cluster nodes) to store them. I have not seen any scenarios where logs will be stored on the cluster nodes themselves.
Given that the nodes are what need access to the mount point I assume it is the OneAgents send logs to the cluster which then stores them on the NFS mount and you can pull them from there when needed.
I found some internal threads that say we can store beyond 90 days and some docs that say no (https://www.dynatrace.com/support/help/shortlink/data-retention#data-retention-by-type). I'll post with what I find if it is not added here.