By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

CloudWatch pushes only ERROR or WARNING message of a specific log file

0

Hello everyone,

I configured an on-prem installation of the CloudWatch Agent, and three logs files should be pushed to CloudWatch Logs. All three configuration entries have only the fields "file_path", "log_group_name", "log_stream_name" and "retention_in_days" set, therefore no filters. For some reason, and for just one of these files, only logs with level > WARN are pushed to the Cloud. Of course the file on the server also has other messages, i.e., a lot of INFO logs. I tried to check on the file system and also on the documentation and I could not find anything like that.

Am I missing something? Thanks, Federico

Topics
Management & Governance
Tags
Amazon CloudWatchAmazon CloudWatch Logs
Language
English
rePost-User-8475088
asked a year ago359 views
1 Answer
0

According to the documentation:

If you do not specify an agent logging config file here, the default file awslogs.conf is used. 
The default file location is /var/awslogs/etc/awslogs.conf if you installed the agent 
with a script, and is /etc/awslogs/awslogs.conf if you installed the agent with rpm.

In the [general] section, what is logging_config_file set to?

profile pictureAWS
EXPERT
kentrad
answered a year ago
  • rePost-User-8475088
    a year ago

    I have seen that piece of documentation, but I have no such file in my installation (i.e., no awslogs folder under /var). This is an on-prem installation that I have done via Systems Manager, and then I configured CloudWatch using the Wizard.

    P.S.: After some services restart anyway it seems that also INFO logs are sent. Anyway it might be interesting to know if and where the file you are mentioning may be located in my environment.

    Thanks!

    Edit: There is no awslogs folder even under /etc

  • kentrad EXPERT
    a year ago

    You could do a 'find . -name awslog.conf' from the root directory. Or explicitly set the logging_config_file and manage it's contents.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content