Question & Answer
Question
If I use LFA to send multiline data to IBM Log Analysis, will it be ingested correctly?
Answer
No, it won't be ingested correctly. This is because LFA will send multiline record as separate rows, hence you will not get the complete record to ingest to LA. You have to use Logstash with multiline codec to send the data correctly to Log Analysis. Please take note that Logstash only works with local files.
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSPFMY","label":"IBM Operations Analytics - Log Analysis"},"Component":"LFA","Platform":[{"code":"PF043","label":"Red Hat"}],"Version":"1.3.5","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
Product Synonym
LA
Was this topic helpful?
Document Information
Modified date:
13 February 2020
UID
ibm12403681