...
You can filter out log events during collection so that some of the logs data will not be collected and available in XpoLog (alternatively it is also possible to mask data)
To set the data filter:
- Under Advanced Settings, click Data Filter.
The Data Filter definitions open. - Enter a search query that filters only events that should be collected from the log (events that don't satisfy the query will be ignored).
It is recommended to run the same query in the Search console prior to saving this filtering to ensure the result is the desired one.
...
- Under Advanced Settings, click File Attributes.
The File Attributes definitions open. - In Sort physical files by, select Last update time or File name.
- In File rotation policy, select Cyclic, New appending, or Static.
- In Get files information from, select Parent directory (default) or Each file directly.
- If you want to import an additional log into the same XpoLog log, click Add another log path.
An additional Log path field opens for selecting another log file to import into the same log. - Repeat step 4 for all the source logs that you want to capture under the same XpoLog log.
...
- In the textbox within Include the last files, type the number of last files to include in the log
OR
In the textbox within Exclude the last files, type the number of last files to exclude from the log. - In the From the filter, select to filter the files from the last (default) or previous specified number of units of time – in the textbox, type the number of units of time and in the following dropdown list, select minutes, hours (default), days, weeks, or months.
- In With size, select equals, smaller than, smaller than or equals, greater than, greater than or equals, between, not equals, and in the following textbox, type the number of bytes.
Note: If you select between, type a range of bytes. - In Exclude name patterns, type the name patterns (separated by commas) of the files to exclude from the log. See XpoLog XPLG Patterns Language for syntax of name patterns.
...