topic Re: M-100 - Log collector storage commands in General Topics

M-100 - Log collector storage commands

chrisp — Mon, 16 Dec 2013 20:40:04 GMT

Anyone know the command to show the actual distribution of current logs on a log collector? Basically, i need the output of "show system logdb-quota" at a collector level. I know how to view my defined % allocations and how view the overall disk space usage. I just need a current view of my current usage by log type, so i can re-allocate more to the log types that we care about.

Re: M-100 - Log collector storage commands

Phoenix — Mon, 16 Dec 2013 20:58:17 GMT

Hello Chrisp,

Below is the command,

"debug log-collector log-collection-stats show incoming-logs"

This command would show dynamic incoming log rate and the current logs for Traffic, threat, system and so on.

Another command for incoming-blocks is there,

"debug log-collector log-collection-stats show incoming-blocks"

Blocks of log data will be moved from one collector to the other based on a hash-map. These stats will show how many blocks of logs the collector has received from the other collectors in the Collector group. When you have only one collector in the collector group you will not see any of the above stats increasing.

Hope this helps.

Re: M-100 - Log collector storage commands

chrisp — Tue, 17 Dec 2013 14:54:55 GMT

Thanks for the response. I was using that command and did a blocks conversion, but it doesn't seem to match with quota or disk-space utilization numbers. Someone sent me a link to another article that talks about blkcount conversion, but i can't access that one (doc-5482). Just wanted to verify i was doing it properly. Right now i can't account for quite a bit of space that appears to be in use. We only have one collector in each collector group.