Log Management Operations

This guide outlines the core operational practices for using Cloudaware Log Management (Conflux) effectively.

Day‑to‑Day Monitoring

Monitor ingestion health (volume trends, gaps, and error rates) for key sources.
Track storage utilization and growth vs. your retention objectives.
Periodically review dashboards and saved searches used by on‑call and security teams.

Use dashboards in Conflux together with Cloudaware Monitoring alerts where appropriate.

Align Conflux roles with your identity provider groups (for example, SSO groups from Okta or Azure AD).
Use least‑privilege access. Not every user needs full raw log access.
Review audit logs for administrative actions in Conflux on a regular cadence.

For retention‑specific guidance, see Platform Operations & Non-functionals.

Log volumes can grow quickly. To keep Conflux efficient:

Scope sources to what you actually need and avoid unnecessary high-volume debug logs in production.
Tune retention by dataset or environment where supported.
Consider sampling or aggregation for very high‑volume sources.

Discuss sizing and optimization options with Cloudaware Support support@cloudaware.com if you see sustained ingestion spikes or storage growth.

Incorporate Conflux into your broader operational playbook:

Validate log coverage as part of onboarding new accounts, applications, and environments.
Include log checks in incident and change workflows.
Document who owns ingestion configurations, dashboards, and alerts.