Enhanced Tracking of DCE USS Rolled Log Archives (PTF DCE1137) - ironstream_for_servicenow_discovery_1 - Latest

Ironstream for Splunk®/Kafka®/Elastic® for IBM Z® Release Notes

Product type
Software
Portfolio
Integrate
Product family
Ironstream
Product
Ironstream > Ironstream for Kafka®
Ironstream > Ironstream for Elastic®
Ironstream > Ironstream for Splunk®
Version
Latest
Language
English
Product name
Ironstream for Splunk®/Kafka®/Elastic® for IBM Z®
Title
Ironstream for Splunk®/Kafka®/Elastic® for IBM Z® Release Notes
First publish date
2014
Last updated
2024-09-26
Published on
2024-09-26T07:29:10.702304

DCE USS file collection allows you to specify whether to track rolled (also known as archived or rotated) files. When USS log rotation is enabled, the rolling operation occurs between DCE USS scans and the rolled log is checked for data written to the log file since the last scan but before the roll operation.

The enhanced log rolling approach introduces a new “Rotation” parameter that can be enabled in both the USSDefaults and USSDirectory parameter groups. It has also necessitated some changes in the way that existing DCE USS configurations must be configured in regards to file filtering and checksum lengths.

For more information, refer to the “Setting Up USS File Collection” chapter in the Ironstream Configuration and User’s Guide.