Clicking the Next button on the first page of the Add Log wizard enables you to define the structure of the incoming log records, i.e. determine the fields of the record and assign to them field names. The page that appears is to apply patterns on the incoming log data in order to normalize the log records into tabular format.
The page that appears as a result of clicking Next is divided into three sections, as follows:
- Upper pane – Text sample from the log selected. This pane presents original data from the incoming log. You can display specific data in this section, by copy pasting records into You can copy paste other log data in this section, and then clicking click the Verify link. YOu You can also refresh the display by clicking the Reset link.
- Central pane – Provides you with three different wasy for applying patterns with three different ways for configuring patterns to apply on the log data,in order to normalize the log records into tabular format.
- Wizard – Use the wizard to create /or modify a pattern. As part of the wizard you may , you can set different indications on each column such as - typeas type, length, optional, column name and more (more information on each type is presented in the wizard itself)/
- Manual – for advanced users who are familiar with the Pattern language; enter a pattern manually by using XpoLog patterns Patterns language (advanced).
- Automatic – XpoLog – XpoLog matches patterns automatically and presents optional patterns.
...
- suggests possible patterns.
- Bottom pane – Log records analysis results. Shows the results of each parsing, i.e. applying the pattern to the log data.
Configuring Additional Patterns
You can configure additional patterns for logs that have different types of records that cannot be represented by a single pattern. The result of the parsing will be presented at the bottom upon each change; once the result is sufficient click the ‘Save’ button to view the log in the log viewer.
...
To configure an additional pattern:
- In the central pane, click the New tab.
A new Pattern tab opens, where you can add a new pattern.
Configuring a Manual Pattern
You can configure a pattern to apply on the log records using the Pattern language.
To configure a manual pattern:
- In the toolbar of the central pane, for Pattern Editor, click Manual.
- Type a pattern using Pattern language (see XpoLog Patterns Language). This pattern is to be applied on the log data to normalize the log records into tabular format.