The Repos (repositories) store the streaming logs securely. A single repo consists of one or more repo-paths with their respective retention policies. The retainment of the logs in the repos depend on the policies set.
Repos¶
Note
The number displayed under the Retention (days) column is the cumulative number of days for all the repo-paths associated with the repo.
Warning
Make sure that you only select the appropriate repos while configuring a new dashboard.
You can replicate a repo of one LogPoint to a repo of one of its Distributed LogPoints in real time. These repos are known as High Availability (HA) Repos. You can use the HA Repos to access the logs even when one of the LogPoint instances (or repos) is not available.
The HA repos replicate the logs in one LogPoint to many LogPoint machines. This replication prevents the unavailability of logs in any one LogPoint.
Note
The logs already present in the LogPoint are not replicated. Only the logs ingested after configuring HA repos are replicated.
HA in LogPoint¶
On the figure above, the repos R1 and R2 belong to LogPoint L1. When you add LogPoint L2 as the Remote LogPoint of L1 and configure them for high availability, the system replicates the repos of L1 to their corresponding repos in L2. The logs ingested after this configuration are stored in both the repos. If you configure HA Repo for R1 and R2, their relevant HA repos L1R1 and L1R2 are replicated in LogPoint L2.
Go to Settings >> Configuration from the navigation bar and click Repos.
Repos¶
Click Add.
Adding Repos¶
In the Repo Information section, provide a Repo Name. Select a Repo Path and the preferred Retention (day) period.
The length of the Repo Name must be less than 29 characters.
The number of Retention (day) must be greater than two.
Click the plus icon to add another repo path. The objective of having multiple storage paths is to transfer the older logs to secondary storages so that the primary storage always has enough space for the newer logs.
If you define two repo-paths for a repo as /opt/immune/storage and /opt/immune/storage1, and select the Retention (day) as five days and 15 days respectively, then LogPoint stores the collected logs in the first path for the first five days. Then, they are moved to the second path and stored for fifteen days. The total retention days for the repo is 20 days. After 20 days, the logs are deleted from the database.
LogPoint checks the retention periods for the repos every day at 1 AM GMT.
To add new paths in the Repo Path drop-down, use the repodir add li-admin command.
In the Availability section, select a Remote LogPoint and a time for Available for (day).
Click Submit.
Note
Click the ? icon near the top-right corner to get help on the inputs.
Go to Settings >> Configuration from the navigation bar and click Repos.
Select the repositories to export.
Export Repos¶
Click Export.
Save the exported pak file.
Note
The exported file contains the repo configuration, i.e., its name, the repo-paths, and the retention policies associated with it.
Go to Settings >> Configuration from the navigation bar and click Repos.
Import Repos¶
Click Import.
Browse the repository file.
Click Upload.
Note
If the imported pak file contains an existing repo name, a dialog box appears that allows you to enter the new repo name.
You can create HA repos for one LogPoint in only one of its Distributed LogPoint.
You can specify the HA repos when creating a repo on the local machine.
On the Distributed LogPoint, you can change the base repo-path from the system settings.
Go to Settings >> Configuration from the navigation bar and click Repos.
Click the Repo Name of the required repo.
Repos¶
Update the information.
Click Submit.
Note
You cannot edit the name of a repo.
Before deleting a repo, make sure that it is not in use.
Go to Settings >> Configuration from the navigation bar and click Repos.
Click the Delete icon under the Actions column of the repo.
Repos¶
To delete multiple repos, select the repos. Click the More drop-down menu and choose Delete Selected.
Repos¶
To delete all the repos, click the More drop-down menu and choose Delete All.
Repos¶
A delete confirmation dialog box appears on the screen. Click Yes to proceed.