Events-log4j-parser: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
Line 34: Line 34:
* regular expressions
* regular expressions


When multiple keywords are present in query, the implied boolean operator is OR. For example, the following query:
When multiple ''separate'' keywords are present in query, the query selects the union of events that contain each keyword.


<pre>
<pre>
Line 40: Line 40:
</pre>
</pre>


will return all events that contain "blue" and all events that contain "red".
will return all events that contain "blue" and all events that contain "red". Those events that contain both "blue" and "red" will be represented once in the returned set.


Note that  
Note that  

Revision as of 00:47, 3 June 2017

Internal

Overview

A library that produces timed events from log4j logs.

GitHub

https://github.com/NovaOrdis/events-log4j-parser

Installation

Installs as a command line utility log4jp-<version>.zip.

TODO

./doc/Events log4j Parser TODO.docx.

Usage

log4jp <log-file> [query]

Query

The query filters the events that will displayed.

A query contains:

  • keywords
  • event fields
  • regular expressions

When multiple separate keywords are present in query, the query selects the union of events that contain each keyword.

blue red

will return all events that contain "blue" and all events that contain "red". Those events that contain both "blue" and "red" will be represented once in the returned set.

Note that

blue red

and

"blue red"

are different.