> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/siem/general-collectors/log-files.md). # Log Files Configuring log file collectors allows you to collect raw data from specific log files on selected hosts and forward it to Enginsight SIEM. *** Navigate to **SIEM** → **Log Files** to show a list of all configured log file collectors. If you have not created any log file collectors yet, this view is empty.

The [log file collector overview](#log-file-collectors-overview) provides information such as: * the hosts on which a log file collector collects raw log data. * whether the log file collector is active or inactive. You can also enable or disable log file collectors, [add new collectors](#add-log-file-collector), and show collected logs directly in the [data lake](/docs/manual/english/platform-usage/siem/data-lake.md). *** ## Navigation Click the **Text Search** field above the list and enter a search term of your choice to find specific list items more quickly. Click the **Refresh** icon above the list to update all list items. Scroll down the list or adjust the number of results shown per page ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between pages. ### Sorting List Items Click the **Sort** icon next to a column name in the table header to sort by that column in ascending or descending order . Click the sort icon above the list to adjust the priority of the applied sorting. A menu opens that shows all columns by which the list is currently sorted. Drag and drop the shown items to change the sorting priority. ### Further Actions for List Items Select the checkbox next to a list item to select the respective item. Alternatively, select the checkbox in the table header to select all list items. The number of selected list items is now shown next to the search field. The **Actions** menu also appears in the upper-right corner. Click it to expand the respective submenu. The following actions are available:

Action	Description
Delete	Delete all selected objects. Click Delete and confirm the prompt that appears by clicking Delete Irretrievably. Please note: Deleted items cannot be recovered.
Enable	This action is only available if all selected objects are inactive. Enable all inactive objects.
Disable	This action is only available if all selected objects are active. Disable all active objects.

*** ## Log File Collectors: Overview The log file overview is structured as a table.

The following information is shown:

Column	Description
Name	Shows the custom name of the collector and an additional description, if provided. The date and time of creation and last edit are also shown. Click the name of a collector to navigate to the respective edit view. Here you can adjust configured settings and delete the collector.
References	Shows the names of the hosts and/or the tags for groups of hosts on which the respective collector collects raw log data and/or which are excluded from collection. Whether host names, tags, or both are shown depends on the settings for the assigned hosts that are configured for the respective collector. Click the name of a host to navigate to the respective host detail view.
Enabled	Shows whether the collector is actively collecting raw log data and forwarding it to the SIEM. An enabled collector is indicated by a green check icon . Disabled collectors are indicated by a red circle icon .
Open in Data Lake	Click Open in Data Lake to open the data lake in a prefiltered view that shows all log entries forwarded to the SIEM by the collector.

*** ## Adding a Log File Collector Click **Add Collector** in the upper-right corner to [create a new log file collector](/docs/manual/english/platform-usage/siem/general-collectors/log-files/add-log-file-collector.md). *** ## Log File Collector: Edit View Click the name of a log file collector to navigate to the respective edit view. Here you can adjust [configured settings](/docs/manual/english/platform-usage/siem/general-collectors/log-files/add-log-file-collector.md#general-settings) and delete the log file collector. The following actions are available:

Option	Description
Save Changes	Click Save Changes after adjusting any settings. Please note: Unsaved changes cannot be recovered.
Back	Click Back to return to the list overview.
Remove	Click Remove, then confirm the prompt that appears to delete the object that you are editing. Please note: Deleted objects cannot be recovered.

***