Custom Patterns for Log Parsing


 

How to edit custom pattern?

Edit custom pattern

 

The field name can be edited. When the mouse is hovered over the field name, the Edit icon will appear.

  1. Use the Field Edit icon to edit the field name.

The display name of the Log Type can be edited.

  1. Use the Log Type Edit icon to edit the log type name.

Edit Log Tpye Name

 

How to delete custom pattern?

Delete custom pattern

 

 

When mouse is hovered over the field name or pattern, the Delete icon will appear.

  1. Clicking the Log Type Delete icon will delete the new log type. Deleting the log type will delete the parser rule for the particular log type.

  2. Clicking the Field Delete icon will delete the new field.

  3. Clicking the Pattern Delete icon will delete the new pattern.

 

How to assign a log type to another log type?

A log type can be assigned to another log type. In this case, the parser rules of the actual log type will not be shown and applied. The parser rules of the assigned log type will be shown and applied. The procedure to assign log type is shown in the screen shots below.

 

Assign Log Type menu option

 

Assign new log type to existing log type

How to add Open Attribute?

If there is no open attribute added for the new field, you can add it here. The procedure to add an open attribute is shown below in the screen shot.

 

Add Open Attribute

How to edit, delete Open Attribute?

 

Edit, Delete Open Attribute

                          

How to mark custom pattern as identity rule for the respective user defined log type?

Mark custom pattern as identity rule for the respective user defined log type

 

The custom pattern (parser rule) can be marked and unmarked as the Identity rule for that user defined log type. Multiple custom patterns can be marked as Identity rules for a particular user defined log type. If no identity pattern is defined for the user defined log type, the message 'No Identity Pattern(s) available for this Log Type. Please mark atleast one pattern as Identity Pattern.' will appear on the Custom Pattern Details screen.
If you hover over the Pattern field, menu options '* Mark as Identity Rule' and 'Delete icon' will appear. Use the '* Mark as Identity Rule' menu option to mark the pattern as identity rule for this user defined log type.

All Patterns

In the Custom Pattern Details page, all the patterns created are displayed with log type, criteria on which the pattern should be applied, field name with edit and delete option, and the pattern with delete option.

Get download link