Logs hydration

Follow these steps to begin log hydration:

  1. Click the Logs tab, and then the Hydration option in the dropdown menu.

    navigate to log hydration

  2. The Logs Hydration interface opens on the Archives tab.

    It lists all logs registered In Config (the Kloudfuse configuration) and In S3.

    log hydration interface

    Every archive includes:

    1. First archived record (date and time): This is the hour-granularity-location of the oldest archive object. Kloudfuse uses this timestamp by default when starting the hydration job. You can override this setting and set a different start time.

    2. First object created (date and time): This points to the timestamp of creation of the first object for that archive rule.

      It helps you to roughly identify when the system completed writing the first object based on the installed rule.

    3. Name of the archive

    4. Approximate size of the archive

    5. In Config stipulates that the archive rule is active

    6. In S3 denotes that the archive is present in the object store.

      When a user deletes a rule, the archives that were saved for it persist in archival storage. Even after the rule is no longer active, you can still hydrate the log objects from the existing archive.

    7. Location directory in the archive location

    8. Filters that were used to select the log lines for the archive.

      For example, if the user installed a new archive rule on 2024/09/24 15:00, and started archiving old logs from 2023/01/02 9:00 onwards, then:

      First Archive Record is 2023-01-02 9:00:00
First Object Created is 2024-09-24 15:00:00

To hydrate a specific log, see Hydrate a specific log.

After successful hydration and indexing, the log is inside the Kloudfuse system, and can be reviewed and analyzed like other logs. The user can see the logs from the hydration job by clicking the Logs button and opening a new tab filter set to the job id.