Identifying candidate records and creating LUOWs
To identify a candidate log record and associate it with an LUOW
To identify a candidate log record and associate it with an LUOW, Log Analyzer performs the following tasks:
Log Analyzer reads a record from a specified log record source.
For more information, see Allocating-log-record-sources.
- Log Analyzer applies the following tests to identify candidates as applicable:
- Skip and limit tests specify a range of records, based on the total number of records that have been read, to consider as candidates. For more information, see Skipping-and-limiting-log-records.
- The log record code test identifies types of log records to consider as candidates. For more information, see Identifying-log-record-codes.
- The interval test specifies a range of records, based on time or log sequence number, to consider as candidates. For more information, see Specifying-intervals.
- Log Analyzer retains or discards the record as follows:
- If the record passes all applicable tests, it is retained as a candidate.
- If the record does not pass all applicable tests, it is discarded. A discarded record is unavailable for further analysis.
Log Analyzer associates the candidate record with an LUOW.
For more information, see Creating-LUOWs.
Log Analyzer applies any specified SELECT filters and identifies LUOWs of interest.
For more information, see Selecting-log-records-and-LUOWs.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*