Events are organized in logs. Some of these logs are arranged in the system under folders, applications, and servers. XpoSearch enables you to display search events from specific logs, or search events in logs that are under specific folders, applications, or servers. The Augmented Search Pane displays under Isolate Results, the sources of the logs that have result events, and also displays in parentheses near each of these sources, the number of logs originating from them. You can select to minimize the search results by filtering results to display only events coming from specific logs, folders, applications, or servers.  

Filtering by Log(s)

System events are arranged in the system in logs of various formats; each log is assigned an XpoSearch log name. XpoSearch enables filtering events to display only those that come from specific logs. Filtering by logs is the most basic kind of search.

To filter simple search results by log(s):

1. In the Augmented Search Pane, under Isolate Results, select logs.
   A table opens listing the names of the logs, the number of events coming from each log, and the percentage of events coming from each log with respect to the number of events from all the logs.
2. Select the checkboxes of the logs whose events you want to display.
   The original search query is updated: the original search text is enclosed in parentheses, and to that is appended in log.[log name 1], log.[log name 2], ....
   The graph, search summary panel, and events list are updated.
   The number of logs selected out of the number available appears in parentheses near Logs in the Augmented Search Pane. Also, the numbers of folders, applications, and servers are updated, to display the numbers of folders, applications, and servers that are sources of the logs containing the filtered events.

You can also manually filter search events to display only those from specific logs, by typing the XpoSearch log names directly into the search query following the search text using Simple Search syntax, and appending to it in log.[log name 1], log.[log name 2], ....for each log from which you want to display events.

Filtering by Folder(s)

Events coming into the system can appear in logs under folders, which are arranged according to user or function, depending on how you built your environment. XpoSearch enables filtering events to display only those that come from logs that reside under specific folders.

To filter simple search results by folder(s):

1. In the Augmented Search Pane, under Isolate Results, select folders.
   A table opens listing the names of the folders, the number of events coming from each folder, and the percentage of events coming from each folder with respect to the number of events from all the folders.
2. Select the checkboxes of the folders whose events you want to display.
   The original search query is updated: the original search text is enclosed in parentheses, and to that is appended in folder.[folder name 1], folder.[folder name 2], ....
   The graph, search summary panel, and events list are updated.
   The number of folders selected out of the number available appears in parentheses near Folders in the Augmented Search Pane. Also, the numbers of logs, applications, and servers are updated, to display the numbers of logs, applications, and servers that are sources of the logs containing the filtered events.

You can also manually filter search events to display only those in logs from specific folders, by typing the XpoSearch folder names directly into the search query following the search text, using Simple Search syntax, and appending to it in folder.[folder name 1], folder.[folder name 2], ....for each folder from which you want to display events.

Filtering by Application(s)

Events coming into the system can appear in logs of applications. XpoSearch enables filtering events to display only those that come from logs that belong to specific applications.

To filter simple search results by application(s):

1. In the Augmented Search Pane, under Isolate Results, select applications.
   A table opens listing the names of the applications, the number of events coming from each application, and the percentage of events coming from each application with respect to the number of events from all the applications.
2. Select the checkboxes of the applications whose events you want to display.
   The original search query is updated: the original search text is enclosed in parentheses, and to that is appended in app.[app name 1], app.[app name 2], ....
   The graph, search summary panel, and events list are updated.
   The number of applications selected out of the number available appears in parentheses near Applications in the Augmented Search Pane. Also, the numbers of logs, folders, and servers are updated, to display the numbers of logs, folders, and servers that are sources of the logs containing the filtered events.

You can also manually filter search events to display only those in logs from specific applications, by typing the XpoSearch application names directly into the search query following the search text, using Simple Search syntax, and appending to it in app.[app name 1], app.[app name 2], .....

Filtering by Server(s)

Events coming into the system can appear in logs of servers. XpoSearch enables filtering events to display only those that come from logs of specific servers.

To filter simple search results by server(s):

1. In the Augmented Search Pane, under Isolate Results, select servers.
   A table opens listing the names of the servers, the number of events coming from each server, and the percentage of events coming from each server with respect to the number of events from all the servers.
2. Select the checkboxes of the servers whose events you want to display.
   The original search query is updated: the original search text is enclosed in parentheses, and to that is appended in server.[server name 1], server.[server name 2], ....
   The graph, search summary panel, and events list are updated.
   The number of servers selected out of the number available appears in parentheses near Servers in the Augmented Search Pane. Also, the numbers of logs, applications, and folders are updated, to display the numbers of logs, applications, and folders that are sources of the logs containing the filtered events.

You can also manually filter search events to display only those in logs from specific servers, by typing the XpoSearch server names directly into the search query following the search text, using Simple Search syntax, and appending to it in server.[server name 1], server.[server name 2], ....