5.3 How to create Analyze Functions

There are several ways to create analyze functions or filter expressions for analyze functions. They are described in table Available methods of creating analyze functions.

Table 1: Available methods of creating analyze functions
Method Description
Edit menu (1) Open the Edit menu and select one of the commands: New Node/Record Filter, New Node/Color Rule, New Node/Bookmark or New Node/Graph. This will create an analyze function without a filter expression. You still have to add the filter expression.
Edit menu (2) Select the log record which should be bookmarked. Open the Edit menu and select Bookmark/Toggle. This will create a new bookmark for the selected log record.
Edit menu (3) Open the Edit menu and select Tab/New... or Add Fixed Sample... A dialog will be opened where you can configure the new tab respectively the fixed sample.
Context menu of the Details window

Select the log record whose data should be used for creating an analyze function. By default the complete log record (i.e. the column FULLROW) will be displayed in the Details window (this can be changed in the Options). Select the part of the log record that should be used in the filter expression (e.g. “a problem occurred” from the log record's description). Then right-click on the Details window to open the context menu to select an analyze function. An analyze function will be created whose filter expression specifies that the column displayed in the Details window must contain the selected text from the Details window:

e.g. FULLROW~=”a problem occurred”

Context menu of the Log window or Files window Right-click on a cell in the Log window or on a file in the Files window to create an analyze function based on the cell's data (e.g. Warning) or on the file. This will open the context menu where you can select one of the analyze functions:

Record Filter, Color Rule, Bookmark, Graph or Tab.

Log window: The filter expression of the new analyze function will compare the column (i.e. each cell in this column) where the selected cell is located with the content of the selected cell:

e.g. LOGTYPE==Warning where LOGTYPE is a column

Files window: The filter expression of the new analyze function will compare the FILE column with the file name of the selected file, e.g. FILE==”MyFile1.log”

When more than one file is selected the filter expression of the new analyze function will compare the FILE column with the file names of all selected files, e.g. (FILE==”MyFile1.log”) || (FILE==”MyFile2.log”)

Context menu of the Log window or Files window – Group command

All log records which have the same data value in a column are considered to be a group. Right-click on a column and select Group/Color Rule, Group/Bookmark, Group/Graph or Group/Tab to create analyze functions based on groups of this column. For each group Ascolog Insight will create its own analyze function whose expression filter is based on the common data value of the group. When you select files in the File window and one of the group commands from the File window 's context menu, an analyze function will be created for each selected file, i.e. in this case a group is formed by all log records that have the same file name in the FILE column.

Example for the Log window: If there are the three data values Info, Warning and Error in the LOGTYPE column Ascolog Insight will create three analyze functions with the following filter expressions:

LOGTYPE==Info, LOGTYPE==Warning and LOGTYPE==Error

Drag & Drop from the Log window to the Functions tree

Hover the mouse over a cell whose data you want to use, left click and drag the cell to the Functions tree. Drop it to a node which is representing an analyze function or a category. This will create a new filter expression node below the selected node where the log records should equal or contain the dragged data value in the selected column:

LOGTYPE==Info or TEXT*=”User could not be deleted”

Drag & Drop from the Log window to the Tab list

Hover the mouse over a cell whose data you want to use, left click and drag the cell to the Tab list. This will create a new tab with a filter expression based on the cell's data:

SEVERITY==High

Tab list Right click on the Tab list to open the context menu. Select New... to create a new tab. The Tab settings dialog will open where you can specify the settings for the tab to be created.
Keystroke combination You can also use the keystroke combinations which are assigned to the analyze functions. You can check out the assigned keystroke combinations in the menu.

The methods Dragging & dropping respectively using the context menus are very efficient ways to create an analyze function.

Hint: You can negate a filter expression when you press the CTRL key while creating the filter expression.