This document describes LogListener's capabilities and limits of file collection, configuration, resources, performance, and error handling related to data collection.
Item | Capability and Limit |
---|---|
File encoding | Supports UTF8 and GBK codec. Note: only LogListener v2.6.2 and above support GBK codec. |
Soft link | Supported. |
Size of a single log | The size of a single-line log is limited to 512 KB. If the size of a single-line log exceeds 512 KB, the log will be truncated and only the first 512 KB is retained. For a multi-line log, after it is divided according to the first-line regular expression, the maximum limit for a single log is 1 MB. |
Regular expression | Perl-compatible regular expressions are supported. |
First log collection behavior | LogListener supports full/incremental collection policies:
|
Log file rotation | Supported. (It is recommended that the file name after rotation not be matched by the wildcard collection path.) |
Collection behavior when log parsing fails | We recommend you enable the feature of uploading parsing-failure logs. If the feature is enabled, parsing-failure logs will be uploaded to the preset index in the format of full text in a single line. Otherwise, the logs will be discarded. |
File opening | LogListener opens files when reading files for log collection and closes the files when the reading is completed. |
Item | Capability and Limit |
---|---|
Checkpoint storage location | The default save path is the data directory in the LogListener installation directory. You can customize a save path in the loglistener.conf file. |
Checkpoint storage policy | LogListener stores two copies of checkpoint metadata:
|
Item | Capability and Limit |
---|---|
Default CPU resource limits | LogListener does not limit CPU resources by default. You can configure CPU resource limits in the configuration file. Without CPU resource limits, the current implementation architecture of LogListener can achieve a maximum CPU usage of 110% (up to 100% for a single business thread and about 10% for a control thread). |
Default memory resource limits | LogListener's default memory threshold is 2 GB. You can change the threshold to 300 MB or higher as needed. |
Default bandwidth resource limits | LogListener does not limit bandwidth resources by default. You can configure bandwidth resource limits in the loglistener.conf file. |
Resource overrun handling policy | If LogListener overruns CPU and memory resources for more than 5 minutes, LogListener will be forced to restart automatically. |
Log compression | Collected logs are shipped as compact logs by default. You can modify log compression configuration in the loglistener.conf file. |
Number of monitored directories | The recommended maximum number of monitored directories is 5,000. If this limit is exceeded, log collection may fail. |
Number of monitored files | The recommended maximum number of monitored files is 10,000. If this limit is exceeded, log collection may fail. |
Item | Capability and Limit |
---|---|
Network error handling | Except exceptions requiring special handling (such as log topic deletion), all other errors (such as network exceptions, timeout, frequency control, and overdue payment) will be retried. |
Maximum retry timeout duration | If data fails to be sent after retrying for more than 1 hour, the system discards the data. The default behavior is to retry at an interval, and the retry interval becomes longer and longer until the maximum retry timeout duration is exceeded. |
Maximum number of retries | The maximum number of retries can be set in the loglistener.conf configuration file and is not set by default. By default, the system retries until the maximum retry duration is exceeded, and then discards the data.If the maximum number of retries is set, the system retries until the maximum number of retries is exceeded, and then discards the data. |
Item | Capability and Limit |
---|---|
Log upload policy | LogListener automatically aggregates and uploads logs of the same file when any of the following aggregation conditions is met: 10,000 logs, the total logset size reaching 1 MB, or the log collection time exceeding 3 seconds. |
File collection handling policy | A single target file (a file that can be matched by the collection path) can be uploaded to only one log topic. The same file cannot be matched by the collection paths of multiple topics. If you need to upload a file to multiple topics, use soft links. You can create different soft links for the same target file so that it can be collected to different topics via different soft links. |
Log collection delay | In the case of real-time collection, data collection, transmission, and storage to disks will be completed within 1 minute, and the logs are retrievable in the console. If the log volume is large, or LogListener can use only a limited amount of resources, there will be some collection delay. |
Item | Capability and Limit |
---|---|
Machine group logic | At present, machine groups are divided into the following two categories, and their usage methods are independent of and incompatible with each other. If the two usage methods are used together, LogListener will not be able to pull the correct collection configuration, resulting in no collection.
|
Relationships between machine groups and log topics |
|
Relationships between machine groups and machines |
|
Limits on the labels of label machine groups |
|
Item | Capability and Limit |
---|---|
Collection blocklist | This feature is used to specify the content to ignore in the collection path. Currently, collection blocklists support two modes:
|
Was this page helpful?