|
|
In order to help you analyze and process the logged
data we built a filtering mechanism that allows you to define
filters easily. You can get to the filter page from the log view
by opening the filtering actions box in the navigation area of the
log and selecting the desired action (edit, new, multi, negate, duplicate or remove). The filter definition page will be
presented in the main frame.
If you defined priorities and/or date
and/or number(s) in the data
pattern you will be able to filter according to them.
Otherwise you will not see those filter sections. |
|
The priority
and choice filters are similar. The filter definition section
consists of two lists: the left list contains the available values
i.e. Error, Debug etc for priorities or other values for the
choice field. Using the add and remove links you can add a
selected value from the left list to the right list in order to
show records that contain that priority or value. In order to
remove a value you must select it in the right list and then
click on the remove link. |
|
There are two ways to define
a date filter:
If you want to view records that arrived before and/or after a
specific date select the 'Dates limit' option and enter the desired
time window.
Select the 'show records from the last n timeunit' option to
view only the records that date back to the last n timeunits,
where timeunit can be either minutes, hours or days. Note that the server will compute the time
according to its own locale and time. |
|
For each of the log's numerical columns you can define a numerical
filter. The filter can be one of the following:
|
- equals - view records
in which the selected column equals the
given value.
- smaller than - view
records in which the selected column is
smaller than the given value.
- smaller than or equals -
view records in which the selected column is
smaller than or equals the given value.
- greater than - view records
in which the selected column is greater than
the given value.
- greater than or equals - view
records in which the selected column is greater than or
equals the given value.
- between - view records in which
the selected columns is included in the given values. The
syntax for a between value is as follows:
range1,range2,....,rangen
where a range
expression is either a single numerical value or of the form
value-value. For example: "27,3-8,11-12"
|
|
|
|
The string filter contains four filtering
options:
|
- contains - view records that contain a given
string.
- not contains - view records the do not contain a
given string.
- equals - view records whose one of their columns equals
the given string.
- not equals - view records that none of their
columns equals the given string.
Check the 'match whole words' option if you
want to view records that contain the given string as a whole word. Check the 'case sensitive' option if you
want to view records that match exactly the case of the given
string.
If the given string is a regular
expression, check the regular expression option.
After entering the string filters specify whether they
refer to a specific columns you or to all the columns |
|
|
|
A filter is used by the dashboard to analyze the risk level of an application the
log in which the filter is defined belongs to.
In order for the dashboard to to use the filter you should set the risk level of the filter and the condition in which this level should be considered. |
|
After a filter is set and activated you will see
the suitable result in the log view. It is possible to zoom in on
a specific record in order to view the records before and after
that record (in the original unfiltered log file). Clicking on
zoom out will load both the last filter and the last filter
results. |
|
It is possible to create and save
filters for every log. When defining a filter you must supply a
name or a generated name will be assigned to the filter. Once a
filter was created or edited the log view will show only records
accepted by that filter. To activate a previously defined filter,
select it from the filter combo box and click the filter link
next to it. Clicking on the small triangle next to the filter
link will display all the options available for that filter. The logical operator between all filters
is AND. Thus a record must be accepted by all filters in order to
be viewed. |
|
when applying
a search or a filter the message will be:
- "No Records To Display from the beginning of the file" - when no
records were found in the whole log (browsing in the log is not
necessary to see more results).
- "No Records To Display on current view only" - when no records
were found on the current view (browsing through the log is
necessary to see if there are more records before or after the
current view).
A user may customize this property in two ways:
1. per log file, on customization - under Log Search Settings.
2. Set the default value for the system. Every created log in XpoLog
will be given the default value. The configuration is available
under the menu settings, Log View Settings.
System default value on installation is to present results from the
beginning of the file. |
|
see Multi
Filters. |
see Global
Filter. |
|
Global Filter
Multi
Filters
Regular expressions
Log View help
|