XpoLog help - Filter Definition 
 
General
In order to help you analyze and process the logged data we built a filtering mechanism that allows you to define filters easily. You can get to the filter page from the log view by opening the filtering actions box in the navigation area of the log and selecting the desired action (edit, new, multi, negate, duplicate or remove). The filter definition page will be presented in the main frame.
If you defined priorities and/or date and/or number(s) in the data pattern you will be able to filter according to them.
Otherwise you will not see those filter sections.

Priorities Filter and Choice Filters
The priority and choice filters are similar. The filter definition section consists of two lists: the left list contains the available values i.e. Error, Debug etc for priorities or other values for the choice field. Using the add and remove links you can add a selected value from the left list to the right list in order to show records that contain that priority or value. In order to remove a value you must select it in the right list and then click on the remove link.

Date Filter
There are two ways to define a date filter:
If you want to view records that arrived before and/or after a specific date select the 'Dates limit' option and enter the desired time window.
Select the 'show records from the last n timeunit' option to view only the records that date back to the last n timeunits, where timeunit can be either minutes, hours or days. Note that the server will compute the time according to its own locale and time.

Number Filter
For each of the log's numerical columns you can define a numerical filter. The filter can be one of the following:
 
  1. equals - view records in which the selected column equals the given value.
  2. smaller than - view records in which the selected column is smaller than the given value.
  3. smaller than or equals - view records in which the selected column is smaller than or equals the given value.
  4. greater than - view records in which the selected column is greater than the given value.
  5. greater than or equals - view records in which the selected column is greater than or equals the given value.
  6. between - view records in which the selected columns is included in the given values. The syntax for a between value is as follows:
    range1,range2,....,rangen where a range expression is either a single numerical value or of the form value-value. For example: "27,3-8,11-12"
 

Strings Filter
The string filter contains four filtering options: 
 
  1. contains - view records that contain a given string.
  2. not contains - view records the do not contain a given string.
  3. equals - view records whose one of their columns equals the given string.
  4. not equals - view records that none of their columns equals the given string.

Check the 'match whole words' option if you want to view records that contain the given string as a whole word.
Check the 'case sensitive' option if you want to view records that match exactly the case of the given string.
If the given string is a regular expression, check the regular expression option.

After entering the string filters specify whether they refer to a specific columns you or to all the columns

 

System Health
A filter is used by the dashboard to analyze the risk level of an application the log in which the filter is defined belongs to. In order for the dashboard to to use the filter you should set the risk level of the filter and the condition in which this level should be considered.

Zoom in / Zoom out
After a filter is set and activated you will see the suitable result in the log view. It is possible to zoom in on a specific record in order to view the records before and after that record (in the original unfiltered log file). Clicking on zoom out will load both the last filter and the last filter results.

Activating a filter
It is possible to create and save filters for every log. When defining a filter you must supply a name or a generated name will be assigned to the filter. Once a filter was created or edited the log view will show only records accepted by that filter. To activate a previously defined filter, select it from the filter combo box and click the filter link next to it. Clicking on the small triangle next to the filter link will display all the options available for that filter. The logical operator between all filters is AND. Thus a record must be accepted by all filters in order to be viewed.

Setting a Search & Filter View
when applying a search or a filter the message will be:
- "No Records To Display from the beginning of the file" - when no records were found in the whole log (browsing in the log is not necessary to see more results).
- "No Records To Display on current view only" - when no records were found on the current view (browsing through the log is necessary to see if there are more records before or after the current view).
A user may customize this property in two ways:
1. per log file, on customization - under Log Search Settings.
2. Set the default value for the system. Every created log in XpoLog will be given the default value. The configuration is available under the menu settings, Log View Settings.
System default value on installation is to present results from the beginning of the file.
 
Multi filters
see  Multi Filters.

Global filter
see  Global Filter.
 

Additional links

      Global Filter
      Multi Filters
      Regular expressions
      Log View help