LPSM can perform a search on only one Logpoint instance at a time. However, to perform searches on multiple nodes inside a Logpoint Pool, ensure that you have a Search Head connected to the Fabric Network.
This section provides you with the configuration process required to perform a search query across different Fabric-enabled Logpoints nested in different pools from a central location.
If we have one LPSM and four regular Logpoint: LP-A1, LP-A2, LP-B1, and LP-B2 nested in two Logpoint Pools Pool - A and Pool - B, we also need a regular Logpoint “Search Head,” nested in the pool Search_Head_Pool. The Logpoint “Search Head” performs search queries across different Fabric-enabled Logpoints.
To set up a Search Head in the Director setup:
Create two Logpoint Pools Pool - A and Pool - B in LPSM. Refer to the Logpoint Pool section for detailed steps to create a Logpoint Pool.
Enable Fabric Connect in Logpoints “LP-A1” and “LP-A2” and then nest them in Pool - A. Refer to the Fabric Connect section for detailed steps.
Enable Fabric Connect in Logpoints “LP-B1” and “LP-B2” and then nest them in Pool - B.
Create a new Pool “Search_Head_Pool” in LPSM. Refer to the Logpoint Pool section for detailed steps to create a pool.
Enable Fabric Connect in the Search Head Logpoint. Nest this Search Head in the “Search_Head_Pool”. Refer to the Fabric Connect section to obtain details on nesting the Search Head in the newly created pool.
Enable Open Door in each Fabric-enabled Logpoints, “LP-A1”, “LP-A2”, “LP-B1”, and “LP-B2”, via either Director Console API or Director Console UI.
Note
It is recommended to configure the Open Door settings through the Director Console API or UI rather than from the Fabric-enabled Logpoint UI.
Configure Distributed Logpoints settings in the Search Head for the Fabric-enabled Logpoints “LP-A1”, “LP-A2”, “LP-B1”, and “LP-B2” via either Director Console API or Director Console UI.
The setup of Search Head in the Logpoint Director setup is now complete.
Follow these steps to execute a search query in LPSM across different machines nested in different pools:
Go to the Search tab.
Select Search_Head_Pool and Search Head in the drop-down menu of Pool and Machine respectively.
In the drop-down menu of Repo, all the repositories from the DLP machines for Search Head are listed. These repositories are the repos from the Fabric-enabled Logpoints. You can now search across the Fabric-enabled Logpoints connected to the Search Head.