Adding an Over SSH Log

To add an Over SSH log to XpoLog:

1. In Add Data pane click on Over SSH. The Source and Collection Setting wizard opens.
   • To change a log source, near Source Type, click on the Change button.
2. In Connection Details, select the SSH account required to connect to the log, or click the new link to add an account  to the system (see Address Book).
   Note: If you do not have any SSH accounts defined in XpoLog, the Add SSH account page is presented automatically.
3. In Log Path or Directory, type the path to the log on the remote machine 
   OR
   Click Browse to open the System Files Browser of the remote machine that you connected to, expand the folders to get to the desired log, and then click Select to display the log location in Log Path.
4. Optionally, append to the log path a name pattern to capture multiple files from the same log. (For pattern syntax, see XpoLog Patterns Language.)
5. Optionally, click on Collection Settings to define advanced settings for the SSH log – Files Filters, and/or Regional Settings (see Configuring Advanced Log Settings).
6. Click Add Log. A progress box displays the status of the system as it scans the selected path for log. When the scan completes, the Patterns Administration Wizard screen opens.
7. Optionally, Apply patterns on the log data and save the log in XpoLog (see Applying Patterns on the Log).
   
8. Click Save – XpoLog applies an automated pattern on the incoming log. Log Collection Settings wizard opens.
9. Optionally, defining the basic information of the new log (see Setting Log General Information).
10. Click one of the following:
    Save & Close – XpoLog saves the new log and points to the logs tree. locate the log in the logs tree and enter the viewer in order to view the log.
    Save & Add Another – XpoLog saves the new log and points to Add Log screen so that you may another log.

Comments:

• XpoLog utilized some system commands on the remote server in order to read the logs without the need to deploy agents. In case XpoLog indicates that some of these commands are missing (mainly the 'Less' command), it is very easy to use XpoLog LogAway which replaces the native commands 
• Over SSH supports  gz, tar and tar.gz logs without extracting them:
  If you have a file archive.gz with a single file in it, it should be defined directly on that file archive.gz
  If you have a file archive.tar / archive.tar.gz with a single file in it, it should be defined directly on that file archive.tar or archive.tar.gz
  If you have a file archive.tar / archive.tar.gz, which contains inside multiple files (log-name.log, log-name.log.1, log-name.log.2, ..., log-name.log.N) it should be defined using the name pattern: archive.tar?log-name.log{string} or archive.tar.gz?log-name.log{string}