Page Comparison

...

1. In Type, select Separator.
2. In Separator, select Space, Tab, or Custom.
3. If you selected Custom, in Insert separator, type the character to be used as a separator.
4. In Num of repeats, type the number of the selected separator to insert.
5. To configure advanced settings for the separator, click Advanced. Otherwise, continue with step 7.
6. If the selected separator does not appear in all records, select the Optional checkbox.
7. Click Apply.
   The log records are refreshed in the bottom pane with showing the parsing resultsadded separator.

Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed. In this case, edit or remove the separator.

Inserting a String

...

Field

 The following procedure describes how to insert into a log record a field that has a string value.

1. In Type, select String.
2. In Name, type the name of the field (column heading).
3. To configure advanced settings for the field, click Advanced. Otherwise, continue with step    step 11.
4. In UI Message Len
5. In Num of repeats, type the number of the selected separator to insert.
6. If the selected separator does not appear in all records, click Advanced, and then select the Optional checkbox.Length, type the maximum length of data displayed in a column. If the data is longer than this value, it continues onto the next line(s).
7. In Chars Length, type the length of the character string. If there are less characters for this field in a log record, characters are added to the string to force it to be this length.
8. In Trim Chars, type a character or string to delete from the column value. For example, typing $ means that $ will be deleted from log records with $ in this field.
9. In Delimiter Chars, type a character or string for delimiting the column.
10. In Mask Column, define the masking of column text by selecting one of the following: Don't mask (default), Mask entire column text, Mask part of column text.
11. Select the GeoIP checkbox to enable GeoIP for this field. 
12. If this string does not appear in all records, select the Optional checkbox. 
13. Click Apply.
    The log records are refreshed in the bottom pane showing the added field.

Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed. In this case, edit or remove the field.

Inserting a Date Field

Inserting into a log record a field with a date value requires giving a name to the date field, and specifying how to format the date.  

For example, if the text in the log is 2003-05-23 00:24:41,368, the format should be yyy-MM-dd HH:mm:ss,SSS.

Examples of optional identifiers are:

• MM – numeric month
• MMMMM – full textual month
• dd – numeric day
• EEEEE – full textual day
• EEE – textual day
• yy –  two-digit year
• yyyy –  four-digit year
• HH – 24 hour
• hh – 12 hour
• a – AM/PM marker
• mm – minute
• ss – second
• SSS – millisecond
• z – general time zone
• Z – RFC 822 time zone
• 'TEXT' – a constant text that appears in the date string

1. In Type, select Date.
2. In Name, type the name of the field (column heading).
3. In Format, type the format to be used to format the date.
4. To configure advanced settings for the field, click Advanced. Otherwise, continue with step 13.
5. In UI Message Length, type the maximum length of data displayed in a column. If the data is longer than this value, it continues onto the next line(s).
6. In Chars Length, type the length of the character string. If there are less characters for this field in a log record, characters are added to the string to force it to be this length.
7. In Trim Chars, type a character or string to delete from the column value. For example, typing $ means that $ will be deleted from log records with $ in this field.
8. In Delimiter Chars, type a character or string for delimiting the column.
9. In Display Format, type the format in which to display the date.
10. In Locale, specify the locale in which the log was written.
11. In Locale View, specify the locale in which the log should be displayed. 
12. If this string does not appear in all records, select the Optional checkbox. 
13. Click Apply.
    The log records are refreshed in the bottom pane showing the added field.

Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed.In this case, edit or remove the field.

Inserting a Date Field

Inserting into a log record a field with a date value requires giving a name to the date field, and specifying how to format the date.  

For example, if the text in the log is 2003-05-23 00:24:41,368, the format should be yyy-MM-dd HH:mm:ss,SSS.

Examples of optional identifiers are:

• MM – numeric month
• MMMMM – full textual month
• dd – numeric day
• EEEEE – full textual day
• EEE – textual day
• yy –  two-digit year
• yyyy –  four-digit year
• HH – 24 hour
• hh – 12 hour
• a – AM/PM marker
• mm – minute
• ss – second
• SSS – millisecond
• z – general time zone
• Z – RFC 822 time zone
• 'TEXT' – a constant text that appears in the date string

1. In Type, select Date.
2. In Name, type the name of the field (column heading).
3. In Format, type the format to be used to format the date.
4. To configure advanced settings for the field, click Advanced. Otherwise, continue with step 13.
5. In UI Message Length, type the maximum length of data displayed in a column. If the data is longer than this value, it continues onto the next line(s).
6. In Chars Length, type the length of the character string. If there are less characters for this field in a log record, characters are added to the string to force it to be this length.
7. In Trim Chars, type a character or string to delete from the column value. For example, typing $ means that $ will be deleted from log records with $ in this field.
8. In Delimiter Chars, type a character or string for delimiting the column.
9. In Display Format, type the format in which to display the date.
10. In Locale, specify the locale in which the log was written.
11. In Locale View, specify the locale in which the log should be displayed. 
12. If this string does not appear in all records, select the Optional checkbox. 
13. Click Apply.
    The log records are refreshed in the bottom pane with the parsing resultspane showing the added field.

Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed. In this case, edit or remove the separatorfield.

Modifying a Field

Removing a Field