You can use the Log Relay add-on product to securely store file-based application logs with Armor for 30 days or 13 months, based on your log retention plan.
- Collects only single-line log formats.
- Does not provide security analysis, parsing, or awareness of log content.
- Can store up to 10,000 logs
Host Log Collector's prices are based on a subscription (base) charge and an overage (tiered) charge.
The monthly subscription charge includes up to 25GB of storage. Additional storage above 25GB will be charged on a tiered level.
Review the following table to understand the pricing structure:
Step 1: Add Log Relay
Use the Post Host Log Collector (Activate) API to add Host Log Collector to your account.
Contact Armor Support to add a custom file path via a host log collector.
|armor -h||Displays the agent's help dialog|
|armor policy -h||Displays the agent's policy help dialog|
|armor policy filelog -h||Displays the agent's policy filelog help dialog|
|armor policy filelog add -h||Displays the agent's policy filelog add help dialog|
|armor policy filelog --add [path]||Adds a filebeat logging policy with the user-defined path, category, and tag(s).|
|armor policy add eventlog [name]||Adds a (Windows) eventlog logging policy with the user-defined path, category, and tag(s).|
|armor policy show||Displays command functionality and syntax available at the command line. "show" can be added to any level of command to help drive user input|
|armor policy sync||Synchronizes the local Armor CORE Agent with API services to pull down the latest policy version|
If you do not see any data in the Search section of the Log & Data Management screen, consider that