: Forward Logs With Log Replay
Focus
Focus

Forward Logs With Log Replay

Table of Contents

Forward Logs With Log Replay

Forward old logs spanning up to the past 3 days from
Cortex Data Lake
to the preferred external destination with a log replay profile.
You can forward old logs spanning up to the past 3 days from
Cortex Data Lake
to the preferred external destination with a log replay profile. This option is useful to retrieve old logs in case of connection failures or outages at the destination server.
To get started, create a log replay profile based on an existing log forwarding profile for the syslog server, HTTPS server, or email server. Once you create the profile, the system forwards the logs in the configured date range to the destination server.
Once you create the log replay profile, you can't modify it. Also, any changes made to the existing log forwarding profile used to create the replay profile don't impact the replay profile.
  1. Log in to the hub and open the
    Cortex Data Lake
    app to the instance.
  2. Select
    Log Forwarding
    from the left navigation menu.
  3. Select a log forwarding profile that is
    Running
    and click
    Add Replay Profile
    . This replicates the parameters defined in the log forwarding profile to the replay profile.
  4. Enter a name for the replay profile and select the date range for which you want to forward the logs.
    You can select a date range up to 3 days before the current date.
  5. Save the changes.
  6. Verify the status of your replay profile is
    Running
    . The log replay profile status indicates “completed” 3 days from the creation date of the replay profile.

Recommended For You