Skip to main content

​
Description

The log_get probe tails a log file and ships newly-appended lines to VMS ingress via ProbeResult.Logs. Supports multiline grouping and sensitive data redaction before export.

​
Config fields

FieldTypeRequiredDefaultDescription
typestringYes—Must be "log_get"
filePathstringYes—Log file path to ship
readFromEndboolNofalsetrue: start from EOF on first run
maxBytesPerReadint64No8 MiBPer-run read window. Clamped to 8 MiB max
multilineStartPatternstringNo—Regex for new log entry start. Non-matching lines join the previous entry
redactPatternsstring[]No—Regex list — each match in log lines is replaced with *** before shipping

​
Metrics

MetricTypeDescription
vms.log_get.lines_sentcounterLog entries shipped in this run

​
Example config

{
  "type": "log_get",
  "filePath": "/var/log/app/app.log",
  "readFromEnd": true,
  "maxBytesPerRead": 65536,
  "redactPatterns": ["password=[^&\\s]+", "token=[^&\\s]+"]
}

​
Notes

  • Redaction happens before shipping — matched data never leaves the agent.
  • Only ships complete lines (ending with \n).