Depending on the method you'd like to collect logs, and the types of logs you'd like to collect, Sumo Logic has two types of Collectors you can choose from.
| || |
Comparing ingestion when files are changed
When a file is updated, the way it is ingested depends on the type of Collector:
- With installed Collectors, Sumo Logic is able to ingest only the new data. For example, if Sumo Logic ingests a log file with 25 lines, and then additional messages are added to the file, the next ingestion will start at line 26.
- With S3 hosted Collectors, an ingested file is treated as a single object and is not expected to be updated or appended with new data. If an existing file is updated in any way, it is considered to be a new object and is ingested again in full. Update of existing objects on S3 sources can result in duplicate messages, depending on the nature of the update.
- Treatment of other hosted Collectors is based on customer configuration.