Search Entities

Search

You can search for the entities available in the Fabric-enabled LogPoint instances from the Search page. You can now modify identical entities of same entity type in multiple LogPoint instances from the search result. You can only modify the entities that are version compatible with each other.

You can modify all the entities except enrichment sources.

Search Page

Search, Edit, Delete, or Clone Entities

Search Entities

1. Click Search from the left navigation bar.

2. Select an Entity.

3. Enter the Search Keyword.

4. Click Search. Director Console lists all the entities that are similar to the Search Keyword of the selected entity.

   Example: The search result lists all the devices that contain the localhost keyword

   

   Search Result

   Note: You cannot perform an empty search.

Edit or Delete Entities

1. Click Search from the left navigation bar.

2. Select an Entity.

3. Enter the Search Keyword.

4. Click Search.

Search Result

1. Click the Delete () icon from the Action column of the search result to delete an entity.

2. Click the Edit () icon from the Action column of the search result to edit an entity.

Editing an Entity

1. Make all the necessary changes and click Edit.

Show Modified

You can add or remove LogPoint machines with identical entities from the Selected Machines section from the Edit page if you need to update only specific LogPoint machines.

1. Toggle the Show Modified () icon to see the list of modified entities.

You can edit or delete multiple items from the search result before clicking Next.

1. Click Next.

2. Review your changes. You can go Back to make any changes if necessary.

   Note

   You can select Download Report to save the configuration file in PDF.

3. Click Finish.

4. Click OK.

Clone Entities

Note:

• You can only clone a normalization package and a label package from the Search page.

• Refer to the Normalization Packages section to create a normalization package and the Label Packages section to create a label package.

1. Click Search from the left navigation bar.

2. Select Normalization Packages or Label Packages as the Entity Type.

   

   Click the Clone Icon
3. Click the Clone () icon from the Action column of the search result.

Select the Machines for Label Packages

Clone the Package

1. Select all the machines you want to clone and click Confirm if you want to clone label packages.

2. Enter a Name and select Replace to replace an existing package with the same name.

3. Click Clone.

Advanced Search

You can use the Advanced Search option to search for the entities in the Fabric-enabled LogPoint instances based on two criteria:

1. Machine Criteria to search for a LogPoint.

2. Configuration Criteria to search for the entities created in a LogPoint.

You can use each criterion separately or use them together to enhance the search results.

Advanced Search Page

All the entities with the same configuration and compatible LogPoint versions are grouped together in the search result. You can modify identical entities of same entity type in multiple LogPoint instances at once. You can add or remove LogPoint machines with identical entities from the Selected Machines section from the Edit page if you need to update in specific LogPoint machines only.

You can also use the Advanced Search in the Configure page. However, in the Configure page, the Advanced Search lets you use the Machine Criteria only to carry out your searches.

Components of Advanced Search

The Advanced Search uses entity, criteria, and operators to enhance the search result.

Entity

Select the Entity that you want to modify or view. The Advanced Search uses the selected entity as the base on which it carries out the entire search. You can search for the attributes of an entity based on other entities that are directly associated with it.

Advanced Search - Entity

Criteria

The Advanced Search consists of Machine Criteria and Configuration Criteria. Both the criteria are independent of each other.

Advanced Search Criteria

1. Use the Machine Criteria to filter LogPoints based on the entity details.

   The Entities, Built-in Collectors/Fetchers, and System actions take place on LogPoint. Thus, the Advanced Search in the Configure section filters machines using Machine Criteria only.

2. Use the Configuration Criteria to filter entities based on the entity details.

   Note

   • You can use the Configuration Criteria to filter entities with the help of other entities that are directly associated with it. You can use this criteria with Machine Criteria.

     Example: You can use a processing policy to combine a normalization policy, a routing policy, and an enrichment policy; and therefore, you can search for a particular processing policy from the processing policy, the normalization policy, the routing policy, and the enrichment policy that are associated with it.

   • Refer to Using Machine Criteria and Configuration Criteria section for details on how to use both the criteria together.

Operator

The Advanced Search uses the is equal to, like, exists, and in operators.

1. is equal to

   Use the is equal to operator to list all the entities that have the exact value as the value entered in its field.

   Example: The result lists the Devices that have their Logpoint Machine name as LogPoint222.

Advanced Search - is equal to Operator

1. like

Use the like operator to list all the entities that have values containing the value entered in the field.

Example: The result lists all the Devices that have 221 in their Logpoint Machine name.

Advanced Search - like Operator

If the Value field is empty, the like operator returns all the entities selected.

1. exists

Use the exists operator to list all the entities where the selected entity exists.

Example: The result lists all the Devices where any FTP Fetcher exists.

Advanced Search - exists Operator

1. in

Use the in operator to list the entities that have either one of the values entered. The in operator is the only operator that accepts multiple values in the Value field.

Example: The result lists all the Devices that belong in LogPoint220, LogPoint202, or LogPoint203.

Advanced Search - in Operator

Steps For Using the Advanced Search

Use the Machine Criteria to search for the Logpoint instances and the Configuration Criteria to search for the entities created in the Logpoint instances.

Use the Machine Criteria

1. Click Search from the left navigation bar.

2. Click Advanced Search.

Advanced Search Using Machine Criteria

1. Select an Entity.

2. Select Machine Criteria as the Search Criteria.

3. Select another Entity.

4. Enter Key, Operator, and Value for the entity.

5. Click Add Criteria. You can add multiple Machine Criteria.

Use the Configuration Criteria

1. Click Search from the left navigation bar.

2. Click Advanced Search.

Advanced Search Using Configuration Criteria

1. Select an Entity.

2. Select Configuration Criteria as the Search Criteria.

3. Select another Entity.

Based on the first entity selected, you can only select entities that are directly associated with it.

1. Enter Key, Operator, and Value for the entity.

2. Click Add Criteria. You can add multiple Configuration Criteria.

Use both the Machine and the Configuration Criteria

Additionally, you can use the Advanced Search with both the Machine Criteria and the Configuration Criteria.

1. Click Search from the left navigation bar.

2. Click Advanced Search.

Advanced Search Using Machine Criteria and Configuration Criteria

1. Select an Entity.

2. Select Machine Criteria as the Search Criteria.

3. Select another Entity.

4. Enter Key, Operator, and Value for the entity.

5. Click Add Criteria.

6. Select Configuration Criteria as the next Search Criteria.

7. Select another Entity.

8. Enter Key, Operator, and Value for the entity.

9. Click Add Criteria. You can add multiple criteria.

Use Advance Search in the Configuration Criteria

In the Configure page, the Advanced Search lets you use the Machine Criteria only to carry out your searches. You can find the Advanced Search in the Entities, Built-in Collectors/Fetchers, and Settings sections of the Configure page.

1. Click Configure from the left navigation bar.

2. Select an Entity, a Built-in Collector/Fetcher, or a Setting.

3. Click Advanced Search.

Advanced Search in Create Device Group of Configure Page

1. Select an Entity.

Machine Criteria is the default Search Criteria used.

1. Select Key, Operator, and Value for the entity.

2. Select the LogPoint instances from Select Configuration Location. You can select multiple LogPoint instances of different pools.

3. Click Next.

Refer to the Configuring Entities and Configuring System Settings section for details on how to configure entities, and system settings.