24.4 enhancements and patches

Pre-filter and parse Windows Event type logs

 provides pre-filtering rules for Windows Event type logs so that fewer logs can be processed for parsing.
After the log data is pre-filtered, you can apply a parsing rule to analyze and extract useful information from the logs to identify patterns, analyze logs, and troubleshoot issues.

For more information, see the following topics:

• Collecting-Windows-events.
• Creating-a-parsing-rule.

Collect logs with enhanced parsing

In file-type log collection policies, parsing is enhanced to provide two levels of parsing by default. The first level of parsing extracts and processes primary log records from the raw log data. The second level of parsing offers deeper insight by further evaluating one of the fields parsed earlier.

For more information, see the following topics:

• Creating-collection-policies
• Creating-a-parsing-rule
• Collecting-application-logs

Export logs as CSV files

From the Explorer page, use the Reporting menu to export logs as CSV files. Use the exported logs for enhanced data analysis, effective troubleshooting, and improved collaboration by sharing them with other stakeholders.

You can also create report definitions to schedule downloading log reports at a specific time.

For more information, see Deriving-insights-from-logs.