Log Insight archives to an NFS export. When space is exhausted, archiving will fail. Prior to that point, at some configurable space-remaining threshold, Log Insight should send a system alert indicating the approaching exhaustion. Such monitoring can be done from the NFS server or another client. But as the primary consumer of the space, and thus the primary entity affected by lack of space, Log Insight has a duty to ...more »
Currently there is no alerting when Log Insight Master or Worker is not receiving logs/API events from its workers or agents. Part of the PCI compliance requires notification when a stoppage of logs is detected.
If this could be an alarm, or an automated email that is sent out, and have the ability to set certain thresholds (no logs within 30 minutes, 60 minutes, 3 hours, etc), that would be great.