One Identity syslog-ng Store Box 5.3.0, User Manual

Page: 12 / 45

Figure 1: Search > Logspaces — The log message search interface
Logspaces:
To choose the appropriate logspace, use the Logspace name menu. Note that you cannot
access plain text logspaces on the SSB search interface.
For more information on the available logspaces, and how to configure them, see "Storing
messages on SSB" in the Administration Guide .
Search:
On the log message search interface, you can use the Search expression field to search
the full list of log messages. Search expressions are case insensitive, with the exception of
operators (like AND, OR, etc.), which must always be capitalized. Click the
icon, or see
Using complex search queries for more details.
When searching log messages, the capabilities of the search engine depend on the
delimiters used to index the particular logspace. For details on how to configure the
delimiters used for indexing, see
"Creating logstores" in the Administration Guide .
NOTE:
You can search in indexed logspaces even if log traffic is disabled.
You can create complex searches using wildcards and boolean expressions. For more
information and practical examples, see
Using complex search queries .
SSB 5.3.0 User Guide
Searching log messages
12