Important
Log forwarding is available only to specific subscription levels with dedicated load balancers. For information about legacy log forwarding for Site Factory subscriptions, see Legacy log forwarding service.
The log forwarding certificates for Splunk, Sumologic, and other syslog destinations must have an expiry greater than 30 days.
Many websites must forward their log files to a central location (such as Sumologic, Splunk, or Loggly) for processing and alerting. Acquia uses TLS over TCP to forward the log files you select to a remote destination.
Log forwarding eligibility
Log forwarding requires dedicated load balancers with your subscription, and is available for the following subscription types:
Cloud Platform Elite
Cloud Platform Premium
Cloud Platform Plus with the Enterprise Security Package add-on
Cloud Platform Enterprise with the Log Forwarding add-on
Cloud Platform Enterprise with an Elite subscription, and an Acquia Technical Account Manager (These users may have the Legacy log forwarding service enabled)
Contact your Account Manager to enable log forwarding for your subscription.
Note
All Cloud Platform subscribers can access Acquia-provided log files in the Cloud Platform interface. For more information, see Streaming log entries in real time.
Configuring log forwarding
After log forwarding is enabled for you, assign the Administer log forwarding for non-production environments and Administer log forwarding for your production environment permissions to roles in your organization. By default, the Team Lead and Senior Developer roles can manage log forwarding on all environments, while the Developer role can manage log forwarding on non-production environments only.
To configure log forwarding for Cloud Platform, a user with one of the log forwarding permissions must complete the following steps depending on the log forwarding service you have selected:
To configure log forwarding for Loggly, complete the following steps:
Sign in to the Cloud Platform user interface as a user with the Administer log forwarding for non-production environments or Administer log forwarding for your production environment permission.
Select your application and environment.
In the left menu, click Logs.
Click Forward.
Click ADD DESTINATION.
In the Consumer select box, select Loggly.
(Optional) In the Copy existing destination section, click Select Destination to copy and use the values from an existing log forwarding configuration of another environment.
In the Name of destination field, enter a human-readable name for the destination of the forwarded logs.
In the Token field, enter a token for securely sending your logs to the consuming service. For more information about customer tokens, see Loggly’s documentation..
Select one or more checkboxes for the log files you want to forward to this destination:
Varnish® (JSON format)
Click Submit. Cloud Platform will display the list of log forwarding destinations for this subscription.
After you create a log forwarding destination, Cloud Platform-created logs should begin forwarding to your remote destination within five minutes. If logs do not appear at your remote destination based on this expectation, review Common issues with log forwarding. If issues persist, create a Support ticket.
All logs forwarded to your remote destination have additional fields added to the beginning of each line. For more information about this data and its format, see File formats in forwarded log files.
Determining the log forwarding status
The Cloud Platform user interface allows you to determine the status of the log forwarding process for each of your logs. A log forwarding destination may have one of the following statuses:
Active: Cloud Platform is actively forwarding your logs to the log forwarding destination. The Cloud Platform user interface will display the active text along with an Active icon in the Status column of the Logs > Forward page.
Inactive: Cloud Platform is not actively forwarding your logs to the log forwarding destination. The Cloud Platform user interface will display the inactive text along with an Inactive icon in the Status column of the Logs > Forward page.
Pending: The Cloud Platform log forwarding process is in the pending state during the time it takes a user to complete the following actions:
Create a log forwarding destination
Edit a log forwarding destination
Enable a log forwarding destination
Disable a log forwarding destination
The Cloud Platform user interface will display the pending text along with the Pending icon in the Status column of the Logs > Forward page.
Legacy log forwarding service
If your application is currently using Acquia’s legacy log forwarding service, contact your Technical Account Manager (TAM) or Acquia Support to learn more about upgrading to the current version of the service.
Note
Acquia Support can only assist with troubleshooting issues related to the new log forwarding infrastructure or customer interface, and cannot assist with troubleshooting issues related to third-party services.
Cloud Platform API endpoints for log forwarding
The Cloud Platform API provides endpoints for log forwarding, including: