For versions 6.6 and below:

The monitoring agent logs its files to a default local drive on the server (C:\ProgramData\Sisense\Infra\AgentOutputs). Follow the steps below to change the log file writing to a different directory: 

 Prerequisites: 

- A folder to hold the new location of the log file.

- Monitoring installed.

 To change the log file writing to a different directory:

1. Using a text editor, open the file C:\Program Files\Sisense\Monitoring Agent\logstash\bin\InfraAgent.exe.config
2. Locate the <add key="logstashOfflineModeOutput" tag.
3. Add the text in bold (in the example below, we're backing up to directory D:\OfflineMonitorLogs)
4. <add key="logstashOfflineModeOutput" value="file { archive_folder => &quot;D:\OfflineMonitorLogs&quot; path=>&quot;###PLACE_HOLDER###\%{host}-%{sisenseOwnerid}-events-%{+YYYY-MM-dd-HH}.gz&quot; gzip=>true archive=>true}" />
5. Save the file and exit the text editor.

For version 6.7.1:

1. Using a text editor, open the file C:\ProgramData\Sisense\Infra\Data\Shipper\Config\shipper.conf

2. In the end of the file, there's a path inside the file object:

file { path=>"C:\ProgramData\Sisense\Infra\Data\Shipper\Output\%{+YYYY-MM-dd}-%{host}-%{sisenseOwnerid}-events.gz" gzip=>true}

Change the bold path into your directory of choice.