What happens if the "include = " is left blank in the liagent.ini configuration file?

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

This KB is to document the behavior that leaving "include = " blank for filelog input blocks in the liagent.ini does for the behavior of the Log Insight Agent.

Environment

Aria Operations for Logs  8.x

Resolution

Leaving "include = " sends everything in the specified "directory = /directory" for the filelog input block.

For example:

[filelog|tag_test5]
directory = /var/log/rand
include =

Will send events from all of the logs in the /var/log/rand directory.