Oracle Cloud Infrastructure Tagging allows you to add metadata to resources, which enables you to define keys and values and associate them with resources. Tag your Logging Analytics resources such as log sources, parsers, entities, saved searches, scheduled tasks, log groups, fields, labels, uploads, and storage to organize and list them based on your business needs.

To learn more about tagging concepts, required permission for working with tags, tag limits, tag variables, using tags to manage access, and managing tags and tag namespaces, see Tagging Overview in Oracle Cloud Infrastructure Documentation.

You can move Logging Analytics resources such as entities, log groups, and saved searches from one compartment to another.

See Working with Compartments in Oracle Cloud Infrastructure Documentation.

Certain actions that you perform on Oracle Logging Analytics emit events. You can define rules that trigger a specific action when an event occurs.

The Events service enables you to create automation based on the state changes of resources throughout your tenancy. Use Events to allow your development teams to automatically respond when an event occurs.

For more information on the Events service, creating rules, and monitoring the performance of your rules by using metrics, see Overview of Events, Managing Rules for Events, and Events Metrics.

The following table lists the event types that Oracle Logging Analytics emits:

This is a reference event for Oracle Logging Analytics:

{
    "eventType": "com.oraclecloud.logginganalytics.uploadlogeventsfile",
    "cloudEventsVersion": "0.1",
    "eventTypeVersion": "2.0",
    "source": "LoggingAnalytics",
    "eventTime": "2023-01-09T10:50:10Z",
    "contentType": "application/json",
    "data": {
      "eventName": "example_event",
      "compartmentId": "ocid1.compartment.oc1..unique_ID",
      "compartmentName": "example_compartment",
      "availabilityDomain": "availability_domain"
    },
    "eventID": "unique_ID",
    "extensions": {
      "compartmentId": "ocid1.compartment.oc1..unique_ID"
    }
  }

Use the Oracle Cloud Infrastructure Monitoring service metrics to monitor Logging Analytics.

The service metrics are specific to your region and give you the visibility on the overall service performance. You can view these metrics in the service overview page and can also configure alarms using Oracle Cloud Infrastructure alarm features to get notifications when thresholds are crossed.

To access the service metrics for storage:

1. Open the navigation menu and click Observability & Management. Under Logging Analytics, click Administration. The Administration Overview page opens.

2. The administration resources are listed in the left hand navigation pane under Resources. Click Service Details.

To access the Processing Errors, Agent Data Upload Size, Agent Data Upload Errors, and Scheduled Task Execution Status metrics:

1. Open the navigation menu and click Observability & Management. Under Monitoring, click Service Metrics.

2. Select a Compartment you have permission to work in, for example, root.

   The list of metric namespaces is updated for the selected compartment.

3. Select the Metric namespace oci_logging_analytics.

   The metrics for Logging Analytics service are displayed.

The following metrics are available:

Select the Metric namespace oci_logging_analytics and the right Compartment while viewing the metrics.

• For Processing Errors metric, note that the value of Compartment must be selected based on your method of data ingestion. If you are collecting logs from the object storage bucket, then the value is the name of the compartment in which ObjectCollection rules are defined. For other methods of ingestion, it is the default root compartment.

• For the metrics Agent Data Upload Size and Agent Data Upload Errors, select the agent compartment.

• For the metric Scheduled Task Execution Status, select the compartment where the scheduled task is located.

For the actions that you can perform with each metric, see Actions for Service Metrics.

You can specify the following customizations to view the metrics:

• The time span for which the metric data must be displayed
• The time interval at which the data must be collated for display. Make sure to specify a value that's higher than the metric's collection interval.
• The statistical operation to perform on the data for displaying. You can select from Max, Min, Rate, Sum, Mean, Count, 50 Percentile, 90 Percentile, 95 Percentile, and 99 Percentile.

If you want to disable the Logging Analytics service in a specific region, then follow these steps. Make sure that you have logged in to the region where you want to terminate the service.

1. Open the navigation menu and click Observability & Management. Under Logging Analytics, click Administration. The Administration Overview page opens.

2. The administration resources are listed in the left hand navigation pane under Resources. Click Service Details.

3. Click Terminate.

   When you terminate the service, your custom configurations such as sources, parsers, and other resources are removed. However, for further cleanup, you may have to remove the IAM policies and user groups that you had created for using Logging Analytics but are no longer used.