Synopsis

The page contains patterns examples of Database Logs such as Oracle, SQL, and DB2.
Each database generates log files containing messages that record all types of events, including startup and shutdown information, errors, warning messages, and access information.

Examples

Example 1 - Oracle Alert Log:

The alert log  is a chronological log of all messages and errors that occur, including the administrative operations. The alert log is maintained as both an XML-formatted file and a text-formatted file

Oracle Alert Log Sample (XML-formatted file): 

<msg time='2014-08-18T05:23:58.391-05:00' org_id='oracle' comp_id='rdbms'
 msg_id='opistr_real:963:3971575317' type='NOTIFICATION' group='startup'
 level='16' host_id='ola-ran' host_addr='192.168.111.14'
 pid='13599' version='1'>
 <txt>Starting ORACLE instance (normal)
 </txt>
</msg>

Oracle Alert Log Pattern (XML-formatted file): 

<msg{regexp:Date,refName=record;columnType=Date;dateFormat=yyyy-MM-dd'T'HH:mm:ss.SSSXXX,time='([^']*)}{regexp:org_id,refName=record,org_id='([^']*)}{regexp:comp_id,refName=record,comp_id='([^']*)}{regexp:msg_id,refName=record,msg_id='([^']*)}{regexp:type,refName=record,type='([^']*)}{regexp:group,refName=record,group='([^']*)}{regexp:level,refName=record,level='([^']*)}{regexp:host_id,refName=record,host_id='([^']*)}{regexp:host_addr,refName=record,host_addr='([^']*)}{regexp:pid,refName=record,pid='([^']*)}{regexp:version,refName=record,version='([^']*)}{regexp:txt,refName=record,<txt>(.*)</txt>}{string:record}

Links

Template applying instructions:

1. Download the template - Oracle - Template
2. Import the template (see Importing a Template)
3. Apply the template on multiple logs (see Applying a Template on Multiple Logs)