...
- In Type, select Date.
- In Name, type the name of the field (column heading).
- In Format, type the format to be used to format the date.
- To configure advanced settings for the field, click Advanced. Otherwise, continue with step 14.
- In UI Message Length, type the maximum length of data displayed in a column. If the data is longer than this value, it continues onto the next line(s).
- In Chars Length, type the length of the character string. If there are less characters for this field in a log record, characters are added to the string to force it to be this length.
- In Trim Chars, type a character or string to delete from the column value. For example, typing $ means that $ will be deleted from log records with $ in this field.
- In Delimiter Chars, type a character or string for delimiting the column.
- In Display Format, type the format in which to display the date.
- In Time Diff, specify the time offset in milliseconds. For example, to subtract 5 seconds from the result in the log view, type -5000.
Text in log: 2003-05-23 00:24:41,368
Time Diff Value: -5000
Result in the log view: 2003-05-23 00:24:36,368 - In Locale, specify the locale in which the log was written.
- In Locale View, specify the locale in which the log should be displayed.
- If this string does this date field does not appear in all records, select the Optional checkbox.
- Click Apply.
The log records are refreshed in the bottom pane showing the added field.
...
- In Type, select Priority.
- In Name, type the name of the field (column heading).
- In Set Priorities, specify the set of priorities that can appear in a record, adding optional priorities the field, in a semi-colon separated list. Example: DEBUG;INFO;WARN;ERROR;FATAL
- To configure advanced settings for the field, click Advanced. Otherwise, continue with step 9.
- In Chars Length, type the length of the character string. If there are less characters for this field in a log record, characters are added to the string to force it to be this length.
- In Trim Chars, type a character or string to delete from the column value. For example, typing $ means that $ will be deleted from log records with $ in this field.
- In Delimiter Chars, type a character or string for delimiting the column.
- In Mask Column, define the masking of column text by selecting one of the following: Don't mask (default), Mask entire column text, Mask part of column text.
- If this field does not appear in all records, select the Optional checkbox.
- Click Apply.
The log records are refreshed in the bottom pane showing the added field.
Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed. In this case, edit or remove the field.
Inserting a Choice Field
The following procedure describes how to insert into a log record a choice field.
- In Type, select Choice.
- In Name, type the name of the field (column heading).
- In Set Choice, specify the set of choices that can appear in the field, in a semi-colon separated list. Example: RED;YELLOW;GREEN
- To configure advanced settings for the field, click Advanced. Otherwise, continue with step 10.
- In Chars Length, type the length of the character string. If there are less characters for this field in a log record, characters are added to the string to force it to be this length.
- In Trim Chars, type a character or string to delete from the column value. For example, typing $ means that $ will be deleted from log records with $ in this field.
- In Delimiter Chars, type a character or string for delimiting the column.
- In Mask Column, define the masking of column text by selecting one of the following: Don't mask (default), Mask entire column text, Mask part of column text.
- If this field does not appear in all records, select the Optional checkbox.
- Click Apply.
The log records are refreshed in the bottom pane showing the added field.
Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed. In this case, edit or remove the field.
Inserting a Numeric Field
The following procedure describes how to insert into a log record a numeric field.
- In Type, select Number.
- In Name, type the name of the field (column heading).
- To configure advanced settings for the field, click Advanced. Otherwise, continue with step 9.
- In Chars Length, type the length of the character string. If there are less characters for this field in a log record, characters are added to the string to force it to be this length.
- In Trim Chars, type a character or string to delete from the column value. For example, typing $ means that $ will be deleted from log records with $ in this field.
- In Delimiter Chars, type a character or string for delimiting the column.
- In Mask Column, define the masking of column text by selecting one of the following: Don't mask (default), Mask entire column text, Mask part of column text.
- If this numeric field does not appear in all records, select the Optional checkbox.
- Click Apply.
The log records are refreshed in the bottom pane showing the added field.
Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed. In this case, edit or remove the field.
Inserting a Timestamp Field
The following procedure describes how to insert into a log record a timestamp field.
- In Type, select Timestamp.
- In Name, type the name of the field (column heading).
- In Display Format, type the format in which to display the time zone.
For example:
Text in log: 56895633232
Display Format: yyyy/MM/dd
Result in the log view: 2007/11/13 - To configure advanced settings for the field, click Advanced. Otherwise, continue with step 9.
- In Product, type the number by which to multiply the timestamp in the log to convert it into milliseconds. For example, to convert a timestamp in seconds to milliseconds, type 1000.
- If this timestamp field does not appear in all records, select the Optional checkbox.
- Click Apply.
The log records are refreshed in the bottom pane showing the added field.
Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed. In this case, edit or remove the field.
Inserting a New Line Field
The following procedure describes how to insert into a log record a new line field.
- In Type, select New Line.
- Click Apply.
The log records are refreshed in the bottom pane showing the added field.
Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed. In this case, edit or remove the field.
Inserting an End of Event Field
The following procedure describes how to insert into a log record an End of Event field.
- In Type, select End of Event.
- Click Apply.
The log records are refreshed in the bottom pane showing the added field.
Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed. In this case, edit or remove the field.
Inserting a GeoIP Field
The following procedure describes how to insert into a log record a GeoIP field.
- In Type, select GeoIP.
- In Name, type the name of the field (column heading).
- In Information, type the information appearing in the field: Country, Region, City; Country; Country Code; Region; City; None.
- To configure advanced settings for the field, click Advanced. Otherwise, continue with step 9.
- In Ref Index, type the zero-based index of the source column. The regular expression will be extracted according to this reference.
- In Ref Name, type the zero-based name of the source column. The regular expression will be extracted according to this reference.
- In Mask Column, define the masking of column text by selecting one of the following: Don't mask (default), Mask entire column text, Mask part of column text.
- If this GeoIP field does not appear in all records, select the Optional checkbox.
- Click Apply.
The log records are refreshed in the bottom pane showing the added field.
Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed. In this case, edit or remove the field.
Inserting an IP Address Field
The following procedure describes how to insert into a log record an IP address field.
- In Type, select IP Address.
- In Name, type the name of the field (column heading).
- To configure advanced settings for the field, click Advanced. Otherwise, continue with step 11.
- In UI Message Length, type the maximum length of data displayed in a column. If the data is longer than this value, it continues onto the next line(s).
- In Chars Length, type the length of the character string. If there are less characters for this field in a log record, characters are added to the string to force it to be this length.
- In Trim Chars, type a character or string to delete from the column value. For example, typing $ means that $ will be deleted from log records with $ in this field.
- In Delimiter Chars, type a character or string for delimiting the column.
- In Mask Column, define the masking of column text by selecting one of the following: Don't mask (default), Mask entire column text, Mask part of column text.
- Select the GeoIP checkbox to enable GeoIP for this field.
- If this string does not appear in all records, select the Optional checkbox.
- Click Apply.
The log records are refreshed in the bottom pane showing the added field.
Note: After clicking Apply, you may get an error, such as The marked field causes the log to be unparsed. In this case, edit or remove the field.