This topic explains the steps required to plan and install XpoLog in your environment. High level actions you need to consider and/or perform are listed below.
• Review the system requirements in order to decide which XpoLog you need (Windows/Linux/Solaris), decide whether a cluster is required, ensure required ports are opened, etc.
• Install XpoLog server/cluster. The main questions to ask are what is the daily logs volume and what the concurrent number of users is.
Note: Although in small environments (less than 30GB/Day), it might be sustainable to a single XpoLog process for processing and search, it is strongly recommended that you run the processor process on a dedicated instance and the UI process on a dedicated instance when managing higher volume. For more information about deployment server sizing, read system requirements
• Review and configure the relevant post installation recommendations
• Configure log sources as detailed in the Administrator Guide. Suggested procedure is described below:
1. Determine your remote configuration needs. Questions to ask include:
• What types of sources do I need to connect to? For example: direct access, databases, SSH, etc. to plan required connectivity to the sources.
• Within each source type, what characteristics dictate the configuration needs? For example: machine type, geographic location, etc.
2. Determine how to group your sources to best fit your needs. You can group source by applications, machines, or any other criteria that make sense for your deployment topology. A source may be a member of multiple groups. For example, source A might be a member of Application A, under the North America folder, and source B might be a member of the Application B, also under the North America folder.
The Applications and Folders structure in XpoLog form the basis for easy navigation and hierarchy management of sources in XpoLog. These tags also enable users to easily manage and execute tag oriented dashboards, searches, and monitors (defined on folder, log, server or application).
3. Create detailed log templates for your main log types in advance. Note that you may update templates any time later on as well.
Once you've completed this planning and initial configuration process, you can start adding data to XpoLog platfrom from multiple sources in the environment as detailed in the Administrator Guide.
Please read this topic thoroughly before starting a deployment, if you have any questions or concerns don't hesitate to contact XpoLog support team.