page_title: Su-log-2014-05-12 page_touched: 20140517012605 old_text: ===Monday=== * Push LDAP schema changes to IDG stable * Push new base module to IDG stable * Update all IDG wheezy systems to rsyslog v7 * Identify all remaining squeeze systems
===Tuesday=== * Discover that limits on index size are causing the loss of splunk data. Bumps the limits arbitrarily while we work on a policy for retention. * Add a new splunk index for DNS named syslog data. * Document adding a new index. * Add new suPerson schema to production directory service.
===Wednesday=== * Directory requests processing * Update model for logsink to make the newsyslog configuration for data from remote syslog systems part of the creation of the rsyslog rules. * Add new indexes to splunk: win_exchange and unix_idg-emailrouter. * Document the steps required to add a new index * Figure out how to activate a splunk index from the command line.
===Wednesday=== * Self evaluation * Directory Access Requests
===Thursday=== * Add new splunk indexes * Update logsink puppet module to make newsyslog configuration part of input configuration * Work on problem with splunk indexes, submit a ticket to splunk * Work with Jason Bishop on rsyslog usage
===Friday=== * Debug problem with splunk indexes * Add nagios checks to splunk * Add nagios checks to logsink * Upgrade workstations to jessie
SUDailyLogs 310. row