Skip to main content

How to view and analyze the logs?

Overview​

Once you have configured the logging source, the logs are available in the log explorer for you to view and analyze. The Log Explorer provides a comprehensive tool to analyze logs and troubleshoot issues quickly, enabling you to fix any infrastructure problems.

Go to Menu. Select Log Explorer . The Log explorer is now displayed.

Intelligent categorization of logs​

The Log Explorer categorizes the logs in your infrastructure intelligently to help you locate the logs you need quickly.

The logs are classified based on the Type and the Group of the logs.

  • Type

    The logs are classified based on the type of source of the logs, i.e., Platform, application, or the device from which the log is generated. For example, some of the categories are Linux, Windows, and Firewall.

  • Group

    The logs are classified based on the category of logs they belong to. For example, some of the categories are as follows: Linux Syslog, Microsoft IIS Log, and Windows EventLog.

This categorization of logs is available in the log explorer on a panel beside the Main menu. You can click on any category under Type or Group to reveal the sub-category until you find the log source at the lowest level. You can select this log source to reveal the log details on the Log Search screen.

Graphical representation of log count based on the log type​

The log explorer main screen shows a graphical representation depicting the classification of logs based on their Type and the count of log events for each type. This graphical representation is in the form of circles to make the classification of logs and the log counts easy to comprehend with a quick view.

Each circle represents a log type in the graph. There are two important points to understand these graphs.

  • The larger the diameter of the circle, the higher the count of log event messages for that particular log type.
  • A circle within a circle represents the hierarchy of the log types. The inner circle is a sub-category of the outer circle.

A few important details related to log events can be seen on the log explorer screen:

  • Events per second: The number of log events per second being sent to the Motadata log explorer from multiple entities in your infrastructure.
  • Total Events: The total number of log events being sent to Motadata log explorer from multiple entities in your infrastructure.
  • Total Alerts: The total number of active log alerts in your infrastructure.

Advanced Log Investigation

For detailed investigation and search of particular log events, we can use one of the multiple log investigation features available in the Log Explorer.

This can majorly be divided into two categories:

Let us now look into these tools in detail in the next section.