Migrate from Papertrail to SolarWinds Observability SaaS

This page is for customers who have been notified that their Papertrail account will be migrated to the next generation product, SolarWinds Observability SaaS. If you have not been notified and would like to begin using SolarWinds Observability SaaS, contact Sales at swo-sales@solarwinds.com.

Why is Papertrail migrating?

SolarWinds Observability SaaS offers requested features to extend beyond log aggregation into full-stack visibility across applications, services, cloud and hybrid infrastructures, and databases. SolarWinds Observability is built around the Papertrail event viewer with matched event search speed and ease of search as Papertrail, while also connecting data points across the stack to deliver operational intelligence and business insights.

Migration Process

When your Papertrail account is ready for migration, you'll see a new button in the top right corner that says Access Papertrail's Next Gen. You will also be notified via email, where we will provide details about the status of your account transition.

After migration, your Papertrail account will be in read-only mode. You will still be able to access some historical information, however, core features, such as logs and alerts, will only be accessible in SolarWinds Observability SaaS.

What do I need to know, coming from Papertrail?

Billing

When transitioning to SolarWinds Observability SaaS, your plan information and billing data will be available in the SolarWinds Customer Service Portal, meaning you will be able to manage your plan and billing within the new platform immediately. Your invoices are stored in the Customer Portal. In the meantime, you can email customerservice@solarwinds.com with any billing-related questions.

Your price for log management is not changing. During this migration, SolarWinds will handle the collection and submission of sales tax. This will now be included in your billing as you transition to the new system. If your organization is exempt from sales tax, provide your exemption certificate to salestax@solarwinds.com.

Authentication

Your existing Papertrail account authentication settings (password, MFA, and SAML) will be preserved during the transition and available for use in SolarWinds Observability SaaS.There is a Coming from Papertrail button on the SolarWinds Observability SaaS login form for your convenience. If you are having trouble logging into the Customer Portal, reach out to our team at customerservice@solarwinds.com.

Log Volume

The syslog volume data is calculated the same way it was in Papertrail. The volume is equal to the message payload, plus 50 bytes for any header data.

To purchase more log volume, select the Manage Your Plan button in the top ribbon.

Alerts

Some alert types currently available in Papertrail are not supported in SolarWinds Observability SaaS. This only concerns alerts migrated from Papertrail. Alerts created in SolarWinds Observability SaaS are not affected.

SolarWinds Observability SaaS does not support the following Papertrail alert types:

Cloudwatch
Datadog
Geckoboard
Hosted Graphite
AppOptics
Boundary
HipChat
Librato
StatHat
VictorOps (Splunk On-Call)
Count-only Webhooks

If you currently rely on one of these alert types, review your current alert configurations and test whether the standard SolarWinds Observability SaaS webhooks can be used with alert types labeled as not supported. There are currently no additional steps available to mitigate or adjust for this change.

Missing Papertrail features

Not all features from Papertrail have been carried over to SolarWinds Observability SaaS with identical functionality. However, the new platform has significant advantages over the previous one: We have an AIOps engine, and we plan to engage that service to improve logging features. If there's anything missing that is a big gap for you and your team, let us know via the Give Feedback option in the help menu. Our product team is ready to collect your feedback and engage with you.

Key features for users migrated from Papertrail to SolarWinds Observability SaaS

Adding logs

To add more logs in SolarWinds Observability SaaS, click the Add data button in the upper-right corner. Follow the prompt for creating a Log destination in SolarWinds Observability SaaS, which can be used to send data to either a syslog or HTTPS endpoint. Test a destination by using curl to send data and ensure it appears in your log viewer. Usage guidance can be found by navigating to Logs > Destinations > Select a destination > View usage.

Log destinations

In SolarWinds Observability SaaS, you can add a new log destination or update your previous ones to account for changes you need to make for your syslog servers and other sources. Using SolarWinds Observability SaaS, you can create log destinations for systems that send logs either via HTTPS or via TCP/UDP in a traditional syslog setup. The connection method is configured when creating a new destination. To create a log destination, go to Logs > Destinations > Create destination.

Two types of connections are available in the Create destination wizard:

Token-based: A token-based destination accepts logs sent via HTTPS. These destinations use a provided token for the authentication of POST requests when sending events and can accept single or newline delimited events.
Port-based: A port-based destination accepts logs sent to a dedicated host/port using the syslog protocol. Every created destination appears on the list in the Destinations tab. You can click the destination's name to open its details, view the token, or change the destination's description.

Saving logs in SolarWinds Observability SaaS

Log archives in SolarWinds Observability SaaS are saved to a JSON-formatted file, which is then compressed to GNU zipped archive, as opposed to a .tsv format in Papertrail.

API differences between Papertrail and SolarWinds Observability SaaS

The following examples show the syntax of some basic API calls in SolarWinds Observability SaaS:

Last 100 events
curl -X 'GET' \
'https://api.na-01.cloud.solarwinds.com/v1/logs?pageSize=100' \
-H 'accept: application/json' \
-H 'Authorization: Bearer {TOKEN}' \

Query for "payload"
curl -X 'GET' \
'https://api.na-01.cloud.solarwinds.com/v1/logs?filter=payload&pageSize=100' \
-H 'accept: application/json' \
-H 'Authorization: Bearer {TOKEN}' \

Query for data between 12:00am and 12:02am on July 02
curl -X 'GET' \
'https://api.na-01.cloud.solarwinds.com/v1/logs?startTime=2024-07-02T00%3A00%3A00Z&endTime=2024-07-02T00%3A02%3A00Z&pageSize=100' \
-H 'accept: application/json' \
-H 'Authorization: Bearer {TOKEN}' \

In SolarWinds Papertrail, the calls would be constructed as follows:

Last 1000 events
curl -v -H "X-Papertrail-Token: {TOKEN}" https://papertrailapp.com/api/v1/events/search.json

Query for "error"
curl -v -H "X-Papertrail-Token: {TOKEN}" https://papertrailapp.com/api/v1/events/search.json?q=error

SeeSolarWinds Observability SaaS REST API for more information on API and accessing the Swagger documentation.

Differences in SolarWinds Observability SaaS search and Papertrail search

Search queries in SolarWinds Observability SaaS that are not wrapped in quotes result in terms that contain the query. Search queries wrapped in quotes result in exact matches, aside from the following exceptions, which always use the "contains" matching:

Sender
Severity
Message
Facility

json.key:value searches behave the same in SolarWinds Observability SaaS and Papertrail.

All searches with a key:value syntax are considered key-value searches.

Heroku Users

SolarWinds is migrating all Heroku users from the Papertrail platform to the SolarWinds Observability SaaS platform. Users who employ certain alert types need to be aware of upcoming changes, as some alert types currently available in Papertrail are not supported in SolarWinds Observability SaaS.

The following Papertrail alert types are fully supported in SolarWinds Observability SaaS:

Email
New Relic
PagerDuty
Pushover
Slack
SNS
Zapier
Regular Webhooks

The following Papertrail alert types are not supported in SolarWinds Observability SaaS:

Cloudwatch
Datadog
Geckoboard
Hosted Graphite
AppOptics
Librato
StatHat
VictorOps (Splunk On-Call)
Count-only Webhooks

Search SolarWinds Support