You can add a log to XpoLog Center from any of the following sources:
- Local – The log is on the same machine as XpoLog Center or can be directly accessed from a remote server (in the case of Windows) or a mounted directory (in the case of UNIX).
- Windows Network – The log is on a remote Windows machine.
- Over SSH – The log is on a remote UNIX machine (with SSH connecting protocol).
- Hadoop HDFS – The log is in a Hadoop environment.
- Google App Engine – The log is on a Google cloud.
- Database – Connection is made to a database to import a table from the database as a log.
- Windows Events – The log is a Windows Events log.
- Remote XpoLog – Connection is made with http (protocol of navigating) or https (secure protocol of navigating, as in a bank) between XpoLog instances.
- Merge Logs – Multiple logs in the system are combined into a single unified view log and sorted chronologically.
Note: Windows Network and Windows Events logs are only available when Xpolog Center is installed on a Windows machine.
As logs are written in free format, XpoLog uses its built-in mechanism to guess the structure of the incoming log, also called a pattern. For example, Xpolog guesses which is the Date field, the Time field, and more, parses the data, and then adds the log records as bulk into XpoLog. Users can further normalize or tune the results of parsing. For example, if the results of parsing data is a log with columns Date, Text2, and Text3, the user can open the log under Folders and Logs, and click the log to open it and tune the parsing results. For example, Text2 column heading can be changed to Host, and Text3 column heading to Server Name. Next time you add a log of a similar type to the one that you edited, it uses the last structure that you applied to the new log.
Once a log is brought into XpoLog it is indexed and undergoes Analytics. You can also run searches on it, and perform all log actions on it.
To add a log to XpoLog:
- Open the XpoLog tab, and in XpoLog Manager, click Add Log
OR
Open the XpoLog tab, and in the Administration menu, select Add Log
OR
In the XpoLog homepage, in the left pane under More Actions, click Add log
OR
In the XpoLog homepage, in the left pane under More Actions, click Quick start wizard, and in the Quick Start Wizard that opens, click Add Log
OR
Open the XpoLog tab, and in the Administration menu, select Folders and Logs, and in the Folders and Logs console that opens, click the New Log button.
The Add Log Wizard opens. - Set the basic information of the log being added to XpoLog, including log name, location, and tagging to applications (see Setting Log General Information).
- Select the log type of the log that you are adding to XpoLog, and fill in the information required to import a log of that type into XpoLog. In the case of a merged log, create the merged log. See Importing the Log into XpoLog.
- Once the log is added to XpoLog, validate the log configuration (see Verifying Added Log Configuration).