Enterprise SIEM, Centralized Log Management, Security, Compliance, Server Monitoring and Uptime Monitoring Software
Table of Contents

Define CSV and W3C Log Entry Columns

The Columns Tab, found within both Log Consolidation and Log Monitor template properties views, enables you to extract values from log entries then, in the case of log consolidation, save those values to custom columns in your log repository database. Log Monitors use the column definitions to extract key value pairs before applying filters.

CSV File and W3C Log Consolidation and Monitor Templates all provide tools to scan files and define columns.

To define CSV and W3C columns

  • From the Columns Tab, click the Load Columns button. The Load Separated Values Columns Dialog displays.
  • From the Load Separated Values Columns Dialog, if not already selected, select the host.
  • If the filename is not already selected, click the Browse Button then select the file to scan.
  • Once the file contents are loaded, select the line number that contains the column headers. Once selected, the software scans the next line then automatically detects the data type. Once all the columns are scanned they are automatically added to the view.
    Several column names are reserved. When the software detects a column name that conflicts with one of the reserved names, an underscore is pre-pended to the Key.
  • Scan the Column Definitions for accuracy. Make any necessary changes then click OK to apply the column definitions to the template.

Sample CSV File

Below is a sample stock file from Yahoo Finance. Notice the date Column Key has been renamed to _date.

Sample W3C File

Below is a IIS log file that was generated from an IIS web server. Notice the date Column Key has been renamed to _date.

Related Topics

Define Log Entry Columns

Log Management Templates

Filters