In Log Insight 4.0, several enhancements have been made to the Log Insight agent. Read on to learn more!
SSL On by Default on Installation
Previous versions of Log Insight had the following default configurations:
- hostname=LOGINSIGHT
- proto=cfapi
- ssl=off
- port=9000
With Log Insight 4.0, the defaults have changed to:
- hostname=LOGINSIGHT
- proto=cfapi
- ssl=on
- port=9543
The key change is that SSL is now on. Given that the proto defaults to cfapi this means the port automatically changes to 9543.
IMPORTANT: Only the SSL parameter has been changed. The port is modified based on the settings of proto and ssl. This means, if during installation you specify a proto of syslog then the port will automatically be set to 6514.
Logrotate + dateext
Logrotate — the mechanism used to rotate logs on most Linux operating systems — supports an option called dateext. The option does the following:
dateext
Archive old versions of log files adding a daily extension like YYYYMMDD instead of simply adding a number. The extension may be configured using the dateformat option.
While Log Insight supported collecting events from rotated log files, Log Insight did not previously support collecting events from rotated log files using the dateext option. Now it does, no additional configuration needed!
Additional Operating System Support
Two new operating systems are now supported:
- SLES 12
- Ubuntu 16.04 LTS
CLF Parser Enhancements
In addition to the new feature and support, an important bug was also fixed in the CLF parser. In previous versions, the CLF parser did not respect space or tab characters in the format parameters. Now it does!
© 2016, Steve Flanders. All rights reserved.
Great article,Now I completely understood the new features of Log Insight 4.0.This is really great that two new operating systems are now supported SLES 12 and Ubuntu 16.04 LTS . In addition to the new feature and support, an important bug was also fixed in the CLF parser. In previous versions, the CLF parser did not respect space or tab characters in the format parameters. Now it does. Thanks for sharing . The way you explained each and everything is really great. Thanks once again for sharing .
Is there also a new Agent Installation parameter to set SSL State?
The Documention seems not to be updated in this point yet. Still says default port is 9000
Hey Markus — there is no new installation parameter though you can change the liagent.ini post-install. I will notify the documentation team about the default port not being updated — thanks for reporting!