The execution of Running a Simple Search generates displays all events that match the search query, up to the maximum number of events allowed by the system.
The following is displayed for each event:
- The timestamp of the event, i.e. the date and time that the event occurred
- The overall severity of the event (colorcoded, , which is the severity of the highest problem found in the event (color-coded; high, medium, low, or none) (provided that Analytics is enabled)
- The fields and field values of the event
- The log, hostserver, and applications of the event.
The In each event, the text that you searched for is highlighted in yellow, and . In addition, provided that Analytics is enabled (the system default), the font of the searched text is colored according to the severity of the text in the event, provided that analytics is enabled (the system default), is colored according to its severity. Also, all field values that Analytics analyzes as being problematic, are color-coded in the event, according to their severity.
Severities are color-coded as follows:
- Red – high severity problem
- Orange – medium severity problem
- Yellow – low severity problem
- Green – no problem found
Hovering over any event displays a menu which enables you to open the analytics Analytics of the event, or view the event in the log viewer.
You also have the option to expand all events to see their stack traces, and to disable the analytics of all events.
Expanding/Collapsing All Events
XpoSearch enables you to view detailed stack trace information of all resulting events, provided that the events have stack traces. This feature makes it possible for you to see the cause of any event. You can also close the stack traces of all events.
To expand all events:
- In the Events toolbar, click the Expand Events icon
.
To collapse all events:
- In the Events toolbar, click the Collapse Events icon
Enabling/Disabling Analytics of All Events
By default, while XpoSearch searches for all events that match your search query, it also performs analytics on all events, color-coding the fields according to their severity, displaying the severity of the events, and suggesting additional potentially problematic fields from the events. You can disable analytics, so that XpoSearch only performs the search.
To disable analytics of all events:
- In the Events toolbar, click the Disable Analytics icon
To enable analytics of all events:
- In the Events toolbar, click the Enable Analytics icon
Viewing the Analytics of an Event
You can view the analytics of any event.
To view the analytics of an event:
- Navigate to the page which contains the event for which you want to open the analytics, and hover over the event.
A menu appears to the right of the event. - In the menu, select Analytics.
The analytics page for this event opens under the Analytics tab, showing . . See for a detailed explanation of this screen.
Viewing an Event in the Log Viewer
You can view the details of any event in the log viewer, as well as the events preceding and following the matching event.
To view an event in the log viewer:
...
/collapse all events, or alternately, to hide/show the Analytics of all events.