Selecting log records and LUOWs
To apply SELECT filters and evaluate LUOWs
To apply SELECT filters and evaluate LUOWs, Log Analyzer performs the following steps:
- If you specified one or more SELECT filters, Log Analyzer processes each candidate log record as follows:
- Log Analyzer compares values of fields from within the record to the SELECT filters that you specified. For more information about SELECT filters, see Specifying-SELECT-filters.
- Log Analyzer records the result of the comparison.
For more information, see Log record and LUOW reference.
- Log Analyzer evaluates the LUOW to determine whether it is an LUOW of interest.
- Log Analyzer handles the evaluated LUOWs as follows:
- If an LUOW is of interest, Log Analyzer retains it.
- If an LUOW is not of interest, Log Analyzer discards it.
Log Analyzer finalizes data and produces output data sets.
For more information, see Working-with-analysis-data.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*