Configure a Host for Local Flat File Collection

Create a host record for the system. For more information, see Add Host Records Manually.
Install and configure a System Monitor Agent on the server. For more information, see Set Up an Initial System Monitor Agent.
Establish a Log Processing (MPE) Policy for the Log Source Type, or use the default (if available).
Add a Log Message Source to the host's System Monitor Agent. For more information, see Add a Single Log Source.
Configure the server's local System Monitor Agent to collect the logs.
Configure the message source.
On the Basic Configuration tab, select the Log Message Processing Settings.
Click the Additional Settings tab, and then select the Start collection from the beginning of the log check box.
Click the Flat File Settings tab and enter the following information:
- File Path - For multiple files, use a wildcard pattern.
- Date Parsing Format
- Multiline Log Message Settings
- Directory Collection
- Days to watch modified files: Specify the number of days to monitor the directory for changes or new files.
  
  The default value for this setting is 0, which means the agent collects from the entire directory. The maximum value is 128 days.
- Compression Type: none, gzip, tar, targzip, zip, bzip (UNIX only), bzip2 (UNIX only)
Log formats with blank lines between each message are considered multi-line messages, and require the Log Message Start Regex to be populated. The following regex enables the Agent to read more than one such log per cycle to keep up with the configured number of logs for collection: \d{1,2}\/\d{1,2}\/\d{4}\s\d{1,2}:\d{1,2}:\d{1,2}\s(AM|PM)\s\d+
Click OK.