Skip to main content
Sumo Logic

Lab 2: Add a Source

Learn how to add an Apache Access source.
Move the apache file to the tmp or temp directory on your computer

Copy the apache_access_logs_tutorial.txt file to your tmp directory (Mac computer) or temp directory (Windows) the images below are for a Mac computer. When you launch Finder, if you do not see your tmp directory. Perform the following: 

Select your hard drive from the Finder locations as shown below

Using the Finder pulldown menu, select Go and then select Go to Folder, type in tmp


Copy the apache_access_logs_tutorial.txt file to this tmp directory

Create the Apache log source

Now that you’ve set up a collector on a machine in your environment, you can add a source. Let's add an Apache Access log source.



Find the collector by name on the Collection page and select Add > Add Source.


Sumo Logic supports many source types. For this tutorial, we’re going to look at the logs in the Apache Access file that you downloaded to your computer in Part 1. That’s a local file source, so click Local File.


This page has lots of options, but just a few settings are required. Add a name to identify the source. For the file path, use the path /tmp/apache_access_logs_tutorial.txt. Enter a name for Source Host and Source Category, so you can easily refer to the source in search queries. Tip: Defining an appropriate source category will let you zero in on your data anytime by specifying the source category in your queries. Click Save.


Click Collectors and Sources to return to the list on the Collection page.


The new source is now listed. The green checkmark indicates that its status is active and that Sumo Logic will start ingesting data from the source.


Test your new source

You can verify that your data is now being ingested by running a search. A quick way to do that is to hover over the source category and click the blue search icon.


The Search page opens to show the search results. If you don't see any data, then change the time to Last 24 Hours. You may also double check the Apache Access file you downloaded in Part 1 of this tutorial and make sure that the date stamp on the messages matches the time interval on the Search page. 


Nice job! You've now set up a source on your local machine, so the data in the Apache Access file that you downloaded to your machine in Part 1 is now available in Sumo Logic.  In Part 4 you'll install the Apache Access app, which has predefined searches and dashboards that make it a snap to view your data.