Which Orion log files would you find the most important?

tballard1

I need to narrow down the amount of log files I add to Splunk from our Orion webserver as well as 5 ape's. I can't ingest all of them, so I'm battling which to cut out and which to ingest. say maybe 5 is the max, which logs would you add?

Success Center

mesverrum

It's really hard to pin down because obviously each log file is tracking different kinds of things that can go wrong.  If I HAD to pick I'd be looking at something like this list since this is where I've had the most frequent issues over the years, but this is absolutely not comprehensive.

BusinessLayerHost.log

Core.BusinessLayer.log

OrionWeb.log

InformationService.msi.log

swdebugMaintenance.log

If someone told me I only got to pick 5 log files I would build a powershell script to scrape all the warn and error messages from all the other logs and dump there in the one new file haha.