Open SaikiranDaripelli opened 6 years ago
You can set up scheduled search and configure alerts to get notified through email or webhook when you don't have any logs for x amount of time. We are actively working on better solutions around collection observability.
We faced an issue last week, where one of our sumologic collector container stopped pushing logs, and we had to manually restart the container for it to start pushing again, and since we were only monitoring if sumologic container is running or not, it took us time to realise container is not pushing logs, instead it was running idle. and we lost few hours of log data as we configured only 15m of json-file logging.
2 Questions