Log Viewer

Open one log and read it record by record: pages of 25 to 500 records, Live Tail, Quick Find, Quick Filter, field and composite filters, zoom into context, export, print and the administrator settings.

What you will do: inspect one log line by line, find the records around an event, and hand a slice of it to a ticket or an audit.

The Log Viewer is a view of one log source — Search is the place for many sources at once. It opens from the Folders and Logs tree (double-click a log under PortX > Data > Folders and Logs) in its own tab, and several logs can be open in tabs side by side. Any log XPLG collects can be viewed, including logs that are not indexed.

Reading

  • Records per page: 25, 50, 100, 250 or 500 (the administrator can change the list and the default). Navigate with first, previous, next and last page; the viewer never loads the whole log.
  • Time panel: pick a time frame, or Live Tail to load the newest records at the configured refresh rate (the button turns red; any other time frame stops it).
  • Maximize hides the left pane.

Finding

ToolWhat it does
Quick Findfinds the first page that contains the string — from the start of the log or from the current view, per the administrator setting — highlights it (case-insensitive) and jumps between matches
Quick Filtershows only records containing the string, highlighted, with a zoom icon per record; the filter history stays available while the log is open
Filter by field valueright-click a value and choose Filter: all records with that value in that field
Composite filterafter a filter, right-click another value and choose Composite Filter > AND or OR
Filter in…for a merged log, filter the member log by the value
Searchright-click a value and send it to the Search console or to an external site configured with the [LOG_COL_DATA] placeholder
Zoom infrom a filtered record, show an equal number of records before and after it (12 and 12 for a page of 25), the record in bold; Zoom Out or Back returns
Resetrestores the view before any find, filter or zoom

Getting records out

  • Export (right-click a log or folder, or tick them under Data > Folders and Logs): with its configuration as a zip that another XPLG can import, or its data transformed to XML, CSV, tab-delimited or raw.
  • Print all displayed records or a selection (click, Shift-click for a range, Ctrl-click for several) as a table.
  • Copy selected records.
  • Save as Template turns the open log's structure, patterns and customization into a template; see Parse.

Administrator settings

Under PortX > Settings > Log Viewer: the records-per-page list and default, whether a search or filter runs from the beginning of the log or from the current view, the tail refresh rate and how many records a tail accumulates before it starts a new page, and the Search context menu entries.

Next: Indexing and retention

Source: XPLG wiki, pages 1594131110, 1594131157, 1594131114, 1594131241, 1594131117, 1594131120, 1594131978, 1594131173, 1594131169, 1594131251, 1594131292, 1594131301, 1594131907, 1594131182, 1597014128, 1594133011, 1594133714 (https://xpolog.atlassian.net/wiki/spaces/XPOL/pages/1594131110).