You can add a log directory to XpoLog by:
...
The Add Logs Directory wizard enables users to add to XPLG multiple logs that are located in a local or remote directory. The user can scan their local or remote directory for the log directory from which they want to capture logs into XPLG. The added Logs Directory appears under Folders and Logs in the left panel.
Note: The Add Logs Directory feature described here enables adding a single logs directory to XPLG. It is also possible to add multiple logs directories and automate a single or multiple logs directory, by adding an Add Logs Directory task (see Adding an Add Logs Directory Task).
Adding a logs directory to XPLG is performed in the following stages:
- Selecting the directory location type, and defining connectivity settings accordingly.
- Selecting the folders and logs in the logs directory to add to XPLG.
- Optional - setting advanced settings.
- Pressing Scan Directory and choosing the relevant sub directories and logs to add.
- Specifying the location of the added logs directory in XPLG.
- Specifying the collection policy used for the newly added logs.
- Tagging the newly added log directory to application(s) (optional)
- Selecting the connectivity settings to the log, by specifying the log type and the connectivity details for connecting to the server to read the log file
To add a log to XpoLog:
- Open the XpoLog tab, and in XpoLog Manager, click Add Logs Directory
OR
Open the XpoLog tab, and in the Administration menu, select Add Logs Directory
OR
In the XpoLog homepage, in the left pane under More Actions, click Add logs directory
OR
In the XpoLog homepage, in the left pane under More Actions, click Quick start wizard, and in the Quick Start Wizard that opens, click Add Logs Directory.
The Add Logs Directory Wizard opens. - In Select Directory Location, select one of the following:
Local
Windows Network
Over SSH
Hadoop HDFS
Local Directory Settings
- If you want to select for the new log a Parent folder other than the default (Folders and Logs), near Parent Folder, click select.
The Parent Folder page opens, displaying the available parent folders. In the Parent Folder page, do one of the following: - Optionally, near Tag to Application(s), click select.
The Tag to Application(s) page is displayed. - In the Tag to Application(s) page, do one of the following:
Select the checkboxes of the applications to tag to the log.
Click the Create New button, and in the New Application dialog box, in Name, type the name of the new application, and then click the Add button. The application is added to the New Application list, and its checkbox is marked. - In the Tag to Application(s) page, click the Apply button.
The selected applications, separated by commas, appear in Tag to Application(s). - In Log Type, select one of the following log types, and fill in its connectivity information:
Local
Windows Network
Over SSH
Hadoop HDFS
Google App Engine
Database
Over FTP
Over HTTP
Windows Events
Remote XpoLog
Merge Events - Click Save.
The log is loaded into XpoLog and the Log Viewer opens to display its records.
Select an existing folder to be the parent of the new log, by clicking the folder on the Parent Folder page.
Click the Create New button, and in Enter new folder name, type the name of the new parent folder, and then click the Save button.
The selected folder appears in Parent Folder.
As logs are written in free format, XPLG uses its built-in mechanism to guess the structure of the log, also called a pattern. For example, XPLG guesses which is the date field, the time field, and more, parses the data, and then adds the log records as bulk. Users can normalize or tune the results of parsing. For example, if the results of parsing data is a log with columns Date, Text2, and Text3, the user can open the log under Folders and Logs, and click the log to open it and tune the parsing results. For example, Text2 column heading can be changed to Host, and Text3 column heading to Server Name. Next time you add a log of a similar type to the one that you edited, it uses the last structure that you applied to the new log.
To add a logs directory to XPLG:
- Open the PortX tab, click Add Data
PortX tab, and in the PortX > Left Navigation Panel > Data select Add Data
OR
PortX > Left Navigation Panel > Folders And Logs, click Add Log - Select Data Source.
- Set the connectivity details to the logs directory (see Defining Connectivity Settings).
- Set the log path to the directory.
- Optional - Configuring Advanced Settings
- Press Scan Directory.
A Progress box displays the status of the system as it scans the directory for logs, a process that can take several minutes. When the scan completes, the Add Logs Directory Wizard presents the General and Folders and Logs sections. - Define the general settings of the logs directory in XPLG (see Setting Logs Directory General Information).
- Select the folders and logs of the logs directory to add to XPLG (see Selecting Logs Directory to Add to XPLG).
- Click the Save button.
The selected folders and logs are created and placed in XPLG. By default, they are indexed and Analytics is performed on them.
The Log Viewer opens with the following message: Select a log from the Folders and Logs panel on the left or Create a New Log.