Use this dialog box from the Monitoring Policy wizard to specify the matching pattern attributes.
Extraction Type
Displays the type of operation that you want to perform.
-
Match
Extracts a piece of log data and adds it as a facet (search filter) to the Search page of the Log Monitoring application.
-
Replace
Extracts and modifies a piece of log data before it is displayed in the Search page of the Log Monitoring application. This option is useful for users who want to change a complex piece of log data with a simple expression.
Pattern
Regular expression that represents the data that you want to find and extract from the logs. If you plan to extract specific chunks of data within the expression, use parenthesis '()' to divide the expression in groups.
For example, suppose you want to define a pattern to find phone numbers in the log, and the phone numbers have a XXX-XXX-XXXX format. If you are interested in the last four digits of the number, use parenthesis in the regular expression to separate the last four digits as follows: ([0-9]{3}-[0-9]{3}-)([0-9]{4}).
Specify group separated by comma
Decimal numbers separated by a comma, where each number represents the group in the regular expression to be used for matching the log data. If you do not want to specify any group, type 0 or leave the box empty.
Using the example described in Pattern, suppose you are interested in the last four digits of a phone number. The regular expression is divided into two groups:
-
([0-9]{3}-[0-9]{3}-), the first group which represents the first six digits.
-
([0-9]{4}), the second group which represents the last four digits.
To indicate that you want to use the second group, type the number 2 in the box.
Display Name
The name which best describes the type of log data that you want to extract. For example, if you are extracting phone numbers, type 'phone number' as the display name.
The name provided in this box will be added as a facet in the Search page of the Log Monitoring application.
Apply Pattern On
Provides a list of the current filtering attributes associated with the template you selected. The filtering attributes represent a specific column in the log file.
Use this option to apply the matching pattern on the column where the log data is located.
Data Type
Select the type of log data to be extracted.
Replace with
Expression that will replace the log data found by the matching pattern.
Validate
Opens the Pattern Validation dialog box to validate the regular expression that you defined.