Set log levels for a data collection node

To troubleshoot your environment, you can set the field worker_log_level in hydra_node.conf for a data collection node. The default log level for a data collection node is INFO. The most verbose logging level is DEBUG.

To set the log level for all data collection nodes:

1. On the search head that administers the Distributed Collection Scheduler, create a local version of hydra_node.conf
2. Edit $SPLUNK_HOME/etc/apps/local/hydra_node.conf to set the log level of for all data collection nodes as per the following:

[default]

gateway_port = 8008

capabilities = * 

log_level = DEBUG