Log ingest rules with 'log source origin'

[Carl_Me]

I have IIS servers with many "log.source" files that are automatically discovered by OneAgent.

I'm trying to find a solution to ingest these logs, but I have far too many different "log.source" files.

I thought about using the "Log Source Origin" matcher with "IIS Log Detector," but it didn't find anything.

My OneAgent version is up to date.

How can we use the "Log Source Origin" matcher?

Another question about the "set-app-log-content-access" option in OneAgent. When should we enable it? Because apparently, I have logs being ingested without having this function enabled...

Thanks!

[rastislav_danis]

You can match logs via process group or use log.source with asterisks.