This message originated from Cribl Community Slack.
Click here to view the original link.
Hello all, working on trying to find volume for destination for each fleet, monitoring only allows for the last 1 day. Are there any specific logs that I can collect from the edge to be able to perform a search on the fleet to be able to see volume over a period of time, ideally at least the last 7 days.
Thanks in advance.
Solved
Edge to Be Able to Perform a Search on the Fleet
Best answer by Jon Rust
You can turn on Cribl Internal metrics and send them to Lake, S3, output of choice
Are you referring to things like inBytes/outBytes/etc?
You can grab the cribl[\d]?.log files in `/opt/cribl/log/worker/0` folder. From there, `channel == 'server'` and `message == '_raw stats'`
You can turn on Cribl Internal metrics and send them to Lake, S3, output of choice
Thanks < @ULBGHDPNY >, < @U091GAV8W6S > suggested that so I'm giving it a shot, routing it to Lake and will try to build visuals from Search.
You can also use the API (it's how the monitoring pages are created). You can peek behind the curtain in browser dev mode to see the calls being made
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.