- Log Stream Overview
- Parser Manager
- Parsers Overview
- View Parser Details
- Create a Custom Parser
- Import Sample Logs
- Define a Subset of the Sample Logs
- Add Conditions
- Add Basic Parser Information
- Extract Event Fields
- Extract Mapped JSON Fields
- Select JSON Fields from a List of Key/Value Pairs
- Select Tokenized JSON Fields from the Values in the Sample Log
- Manually Enter JSON Path Expressions
- Reorder Mapped JSON Fields
- Review the Matching JSON Fields and Values
- Add Logic to JSON Field Extraction
- Expressions for Extraction Conditions
- Array Log Sample
- Extract Fields Using Regular Expressions
- Extract Mapped JSON Fields
- Add Event Builder Rules
- Review and Save Parser
- Manage Existing Custom Parsers
- Tokenize Non-Standard Log Files
- Customize a Default Parser
- Duplicate a Parser
- Enable or Disable Parsers
- Live Tail
- Enrichments
- Event Filtering
PrevNext
Stream and Pause
Live Tail provides a console to stream and pause parsed and unparsed data from the pipeline. Log events coming from the stream are sampled and displayed on screen in near real time.
Live Tail continuously looks for new logs, adding new events to the bottom of the list, while older events disappear off the screen from the top.
Note
Click the arrow next to the TIMESTAMP column to reverse this order.
Click Pause to pause the real time streaming at any time (the system will stop looking for new logs), and click Play to restart.