...
XpoSearch provides two main types of searches:
- Initial search – a simple searchSimple search – initial search, using simple search syntax, which when executed results in a list of matching events
- Complex search – an advanced search, using complex search syntax, which when executed results in a summary table of matching events
Search Stages
A search can be executed in three stages:
- Initial search
- Refined search
- Complex search
Initial Search
In the initial search, the user enters a search query of simple criteria, and the search is executed on all the event data. In this simple search, the user can search the event data for a simple term or more than one term, perform a Boolean search, a search with wildcards, or a comparison search.
The execution of the search query returns a list of all matching events from all relevant logs (latest on top). In addition, XpoSearch returns a graphical view of the distribution of the matching events over time and per data source.This
Refined Search
The resulting events of a simple search can be refined to minimize minimized by refining the search results , by doing using either or both of the following methods:
- Performing a Filtered Search – filtering the resulting events according to the source of the event – logs, files, applications, or servers
- Performing a Refined an Analytics-based Search – adding one of the event data fields discovered during the simple search to the search criteria of the simple search
...
Complex search queries are used for performing used to perform advanced complex operations and reporting on the log events resulting from a simple search. Execution of a complex search query results in a summary table, and can also be visualized as gadgets in XpoLog Dashboards.