"Ingested log data is trimmed" message in Dynatrace Managed

[Magda_Zarek]

If you receive a Ingested log data is trimmed message, go through the following steps: 

1. In Cluster Management Console, go to Events.
2. Make sure Only show log events that have minimum severity level of is set to informational or warning.
3. In the Search box, search for Ingested log data is trimmed.

4. If a cluster event was created recently, check its time, affected environments, and log ingest limit.

5. For each affected environment, go to Logs and set the global timeframe selector to the hour from the cluster event from the previous step.
6. Inspect 1-minute intervals of log events ingest.
   • If you see that log events are trimmed to the Maximum ingest of Log Events limit set for this environment, you need to increase it.

   • If log ingest was below the limit in subsequent intervals, your log entries will be re-ingested and should be available later, but you could consider increasing the limit to avoid a delay in data processing.

7. To increase the ingest limit, in Cluster Management Console, find Maximum ingest of Log Events and edit the Max limit value for the selected environment.

   • We recommend that you increase the limit incrementally followed by verification of ingest volume.

   • Make sure that your cluster still meets the hardware recommendations for the new ingest volume.