Log Filter Configurations
You can specify log filter conditions for system logs received from multiple sender devices on the Log Receiver to simplify locating specific types of logs and monitoring large volume of logs.
Configuring a Log Filter Criterion
You can specify log filter criteria to choose the types of log entries that will be received by Log Receiver.
- Open QuLog Center.
- Go to QuLog Service > Log Receiver > Filter Criteria.
- Select Event Log or Access Log.
-
Click Add Filter
Criteria.
The filter criteria window appears.
-
Specify the following
information:
Log Type
Settings
Event Log
-
Severity level
-
User
-
Source IP
-
Service
-
Category
-
Content
-
Hostname
Access Log
-
Severity level
-
User
-
Source IP
-
Accessed resources
-
Hostname
-
Connection type
-
Action
-
- Click Apply.
QuLog Center adds the specified log filter criteria.
Editing a Log Filter Criterion
- Open QuLog Center.
- Go to QuLog Service > Log Receiver > Filter Criteria.
- Go to Event Log or Access Log.
- Select a filter criteria.
- Optional: Click Reset to clear all filter criteria settings.
-
Click
.
The Filter Criteria window appears.
-
Edit the log filter
fields.
For details, see Configuring a Log Filter Criterion.
-
Click Apply.
All changes are applied.
Deleting a Log Filter Criterion
- Open QuLog Center.
- Go to QuLog Service > Log Receiver > Filter Criteria.
- Select Event Log or Access Log.
- Select a filter criteria.
-
Click
.
A confirmation window appears.
- Click Yes.
Importing a Custom Filter Criterion
- Open QuLog Center.
- Go to QuLog Service > Log Receiver > Filter Criteria.
- Click Event Log or Access Log.
- Click Add Filter Criteria.
- Go to Import custom filter criteria from the selected tab.
-
Click
.
The custom filter criteria drop-down menu appears.
-
Select the custom filter tab
from the drop-down menu.
Note:For details on how to create a custom filter tab, see the following topics:
The selected custom filter criteria are applied to the log.