Hi
We're running a High Availability Cloud system.
If I log into Server 1 then the Log Reader application will pick up the logs on Server 1, if I'm on Server 2 then I get to see the logs for Server 2 etc - the server I end up is random.
Has anyone found a way of accessing the system logs regardless of which server a user is logged into via the Shared-Logs directory in a UI or expression rule ?
I had hoped to use some of the Log Reader functions for reading CSV's but these functions do not seem to work with the Shared Logs directory construct.
Any ideas ?
Many thanks
Paul
Discussion posts and replies are publicly visible
Hello Paul,
The Log Reader uses the value of the variable "conf.suite.AE_LOGS" as the path concatenated with the "csvPath" on the function "readcsvlog". depending on the AE_LOGS value you may or may not have access to the shared logs for each server. probably you have to send something like "server1/auth-audit.csv"
I remember seen the functionality of getting all the logs at once in a custom plugin that actually access all the shared-logs and creates one report. Not exactly in the shared components.
Check the AE_LOGS value and confirm if you can access the other logs, and i recommend you to open a ticket to Appian support.
Jose
Hi Paul
Were you able to solve this? We are also looking to export the logs from Appian Cloud via API to an on-premise syslog.
Hi Ankur
Afraid not ... all the functions that came with the Log Reader application do not have visibility of the other servers - they can only act on the data in the logs for the server you are logged into.
We had an early version of the Log Streaming facility to push our logs out to an external system where we do the same collation - just a shame I couldn't do the same in Appian.
Hi . Question for you: if the Log reader is reading from conf.suite.AE_LOGS and I have a distributed environment (shared-logging where /opt/appian/logs is a symbolic link to /export/appian/<>/shared-logs/<servername>), is the plugin currently reading from both servers or only one?
Paul,
It is unknown to me if the Log Reader plugin pulls logs from the directory appian/ae/shared-logs/<server-name>, but I can confirm that an Appian Cloud HA instance does expose logs from all three servers in their own directory under appian/ae/shared-logs/ -- e.g.
appian/ae/shared-logs/server1
appian/ae/shared-logs/server2
appian/ae/shared-logs/server3
This might give you insight into how the logs are organized in Appian Cloud HA instance and adjust the inputs of the plugin (if possible)
An alternative to the Log Reader plugin would be setting up Log Streaming in your Appian Cloud instance. Log Streaming supports sending auth-audit.csv logs from all three nodes in your HA instance to a syslog receiver in your network.
https://docs.appian.com/suite/help/19.2/Log_Streaming_for_Appian_Cloud.html
Hope this helps
-Luis