Content Comparison

...

• The timestamp of the event, i.e. the date and time that the event occurred
• The overall severity of the event, which is the severity of the highest problem found in the event (colorcoded, high, medium, low, or none) (provided that Analytics is enabled)
• The fields and field values of the event
• The log, host, and applications of the event.

The text that you searched for is highlighted in yellow, and . In addition, provided that analytics is enabled (the system default), the font of the searched text is colored according to the severity of the text in the event, provided that analytics is enabled (the system default), is colored according to its severity. Also, all field values that  discovery analyzes as being problematic, are also color-coded in the event, according to their severity.

Severities are color-coded as follows:

• Red – high severity problem
• Orange – medium severity problem
• Yellow – low severity problem
• Green – no problem found

...

You also have the option to expand all events to see their stack traces, and to disable the analytics of all events.

Expanding/

...

Collapsing Events

Events that have stack traces, are followed by an Expand Events icon Image Added.

XpoSearch enables you to view the detailed stack trace information of all resulting events, provided that the events a single event, or of all  events that have stack traces. This feature makes it possible for you to see to trace the cause of any event that has a stack trace. You can also close the stack traces of all events.

...

• In the Events toolbar, click the Expand Events icon .
  The stack traces of all events open. The toolbar icon changes to Image Added, enabling you to later close all stack traces. 

To expand a single event: 

• At the end  of an event that has a stack trace, click the Expand Events icon Image Added.
  The stack traces of the event opens. The icon changes to Image Added, enabling you to later close the stack trace. 

To collapse all events: 

• In the Events toolbar, click the Collapse Events icon .
  The stack traces of all events close. The toolbar icon changes to Image Added, enabling you to later open all stack traces.

To collapse a single event:

• At the end of the event with the open stack trace, click the Collapse Events icon Image Added.
  The stack trace of the event closes. The icon changes to Image Added, enabling you to later open the stack trace.

Enabling/Disabling Analytics of All Events

...

• In the Events toolbar, click the Disable Analytics icon .
  The severities of the events are not displayed, and problematic field values are not color-coded. The toolbar icon changes to Image Added, allowing you to enable analytics at a later time. 

To enable analytics of all events: 

• In the Events toolbar, click the Enable Analytics icon .
  The severities of the events are displayed, and problematic field values are color-coded. The toolbar icon changes to Image Added, allowing you to disable analytics at a later time

Viewing the Analytics of an Event

...