> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/siem/general-collectors/log-files/add-log-file-collector.md). # Add Log File Collector Click **Add Collector** in the upper-right corner of the [log file overview](/docs/manual/english/platform-usage/siem/general-collectors/log-files.md#log-file-collectors-overview) to create a new log file collector. The **SIEM** → **Log Files** → **Add** view opens.

After configuring all settings, click **Add Collector** to save and create the new collector. Click **Back** to return to the list overview. {% hint style="danger" %} **Please note**: If you leave this view without saving, all configured settings will be lost and cannot be recovered. {% endhint %} *** ## General Settings Here you can configure various basic settings.

The following options are available:

Option	Description
Name	Enter a meaningful name for the collector.
Description	Provide a more detailed description for the collector. This field is optional.
Enabled	Enable the collector so that it can receive raw logs and forward them to the SIEM. This option is enabled by default. Select or deselct the checkbox next to Enabled to enable or disable the collector.

Option

Description

Name

Enter a meaningful name for the collector.

Description

Provide a more detailed description for the collector.

This field is optional.

Enabled

Enable the collector so that it can receive raw logs and forward them to the SIEM.

This option is enabled by default.

Select or deselct the checkbox next to Enabled to enable or disable the collector.

*** ## Assigned References Here you can define the hosts or groups of hosts to which the configured settings should apply.

The following options are available:

Option	Description
Hosts	Define the hosts to which the configured settings should apply. Click the Hosts field to expand a list of all available hosts, then select one or more hosts. Alternatively, use the free-text search to find hosts in the list more quickly. Click the Remove icon next to an added host to remove it from the Hosts field.
Tag Logic	Define how many tags an assigned host must have for the settings to apply to it. The default tag logic is All Tags are Present in the Reference. Click the Tag Logic field to expand a list of all available options. The following options are available: All Tags are Present in the Reference: An assigned host must have all specified tags for the settings to apply to it. At Least One of the Specified Tags is Present: An assigned host must have at least one of the specified tags for the settings to apply to it.
Tags	Define tags for groups of hosts to which the configured settings should apply. Click the Tags field to expand a list of all available tags, then select one or more tags. Alternatively, use the free-text search to find tags in the list more quickly. Click the Remove icon next to an added tag to remove it from the Tags field.

Option

Description

Hosts

Define the hosts to which the configured settings should apply.

Click the Hosts field to expand a list of all available hosts, then select one or more hosts. Alternatively, use the free-text search to find hosts in the list more quickly.

Click the Remove icon next to an added host to remove it from the Hosts field.

Tag Logic

Define how many tags an assigned host must have for the settings to apply to it.

The default tag logic is All Tags are Present in the Reference.

Click the Tag Logic field to expand a list of all available options.

The following options are available:

All Tags are Present in the Reference: An assigned host must have all specified tags for the settings to apply to it.
At Least One of the Specified Tags is Present: An assigned host must have at least one of the specified tags for the settings to apply to it.

Tags

Define tags for groups of hosts to which the configured settings should apply.

Click the Tags field to expand a list of all available tags, then select one or more tags. Alternatively, use the free-text search to find tags in the list more quickly.

Click the Remove icon next to an added tag to remove it from the Tags field.

### Excluded References Here you can define which hosts or groups of hosts should be explicitly excluded from the configured settings. {% hint style="info" %} Defining excluded hosts is optional. {% endhint %} Click **Define Exceptions** next to **Assigned Hosts** to show the options for **Excluded Hosts**.

Configure all settings as described for an assigned host. *** ## Extractors Here you can select one or more custom [extractors](/docs/manual/english/platform-usage/siem/advanced-settings/extractors.md) that you want to use to extract specific information from the source fields of the defined log files. {% hint style="info" %} Specifying extractors is optional. {% endhint %}

Click the **Extractors** field to expand a list of all available extractors, then select one or more extractors. Alternatively, use the free-text input to find extractors in the list more quickly. {% hint style="warning" %} **Please note**: If you have not added a custom extractor under **SIEM** → **Advanced Settings** → [Extractors](/docs/manual/english/platform-usage/siem/advanced-settings/extractors.md), this list is empty. {% endhint %} Click the **Remove** icon next to an added extractor to remove it from the **Extractors** field. *** ## File Paths Here you can enter the path to the directory that contains the log files whose data you want the collector to gather and forward to the SIEM.

Click in the **Filepath** field and enter the respective file path. {% hint style="info" %} You can use wildcards (\*) here. {% endhint %} Click **Add Field** to show an additional input field where you can enter another file path. Click the **Delete** icon next to an added file path to remove it. ***