Revision as of 14:06, 28 October 2017

Internal

A library that produces timed events from log4j logs.

https://github.com/NovaOrdis/events-log4j-parser

Installs as a command line utility lg-<version>.zip.

./doc/Events log4j Parser TODO.docx.

lg [command] [command options] [query] <log-file1> [log-file2 ...]

The command is optional.

When the command is missing, the implied command is "output", which works as described here:

output

Unless output filtering options are used, the events are displayed in their raw format, which is how they appear in the original log.

Commands:

help
version
output
describe - displays a description of the events produced as the result of the parsing.
time-gaps - identify time gaps in the log
count (-c) - display the number of events that match the query.
exclude (-x) - filter out the events that match the query, and only display those that do not match. This command is equivalent with the grep --invert-match (-v) option.

For more details about commands (procedures), see:

Events Processing (events-processing)

For more details about the query syntax, see:

Queries

@@ Line 23: / Line 23: @@
   lg [''command''] [''command options''] [''[[Events-api_Concepts#Query|query]'']] <log-file1> [log-file2 ...]
-The command is optional. When the command is missing, the implied command is "query", the given log file is parsed and the resulted events are matched against the query. Unless output filtering options are used, the events are displayed in their raw format, which is how they appear in the original log.
+The command is optional.
+When the command is missing, the implied command is "output", which works as described here: {{Internal|Events-processing output|output}}
+Unless output filtering options are used, the events are displayed in their raw format, which is how they appear in the original log.
 Commands:
@@ Line 29: / Line 33: @@
 * help
 * version
+* [[Events-processing output|output]]
 * [[Events-processing#describe|describe]] - displays a description of the events produced as the result of the parsing.
 * [[Events-processing#time-gaps|time-gaps]] - identify time gaps in the log