Skip to main content
Interania

Admin Guide: Analyzing Interana logs

You can use Interana structured logs to analyze how your organization is using Interana. Use the log data to learn more about the queries that your users are running, both the type of query and performance metrics, as well as the overall data ingestion process.

This process is called loopback, because you are ingesting Interana structured logs back into Interana (looping them back into the system) for analysis. The following topics demonstrate how to set up Interana structured log loopback:

Interana structured logs for query usage

You can ingest Interana structured logs for query usage to analyze how Interana is used within your company. The following task demonstrates how to create a table, set up loopback, and then restart the Interana service.

To loopback structured logs for query usage, do the following:

  1. Create a table to contain loopback query structured log data, using the following command.
ia table create event <query_table_name> "__time__" milliseconds username
  1. Set up loopback, using the following command.
ia settings update usage_loopback query_table <query_table_name>
  1. Log into the API node and restart the Interana service with the following command.
iactl restart

See Interana structured logs reference: Query usage for detailed information about the ingest events that we capture.

Interana structured logs for monitoring ingest

You can analyze Interana structured logs to monitor Interana ingest performance. The following task demonstrates how to create a table, set up ingest, and then restart the Interana service.

To loopback structured logs for ingest, do the following:

  1. Create a table to contain the loopback structured log data, using the following command.
ia table create event <ingest_table_name> "__time__" milliseconds pipeline_id
  1. Set up loopback, using the following command.
ia settings update usage_loopback ingest_table <ingest_table_name>
  1. Log into ALL import nodes and restart the Interana service with the following command.
iactl restart

See Interana structured logs reference: Ingest monitoring for detailed information about the ingest events that we capture.