Analyzing log records

Analyzing log records means to apply specialized rules, loaded from symptom catalogs selected for log analysis operations, against log records. The Log and Trace Analyzer provides two log analyzers (analysis engines), the Symptom 0.1 Log Analyzer which uses Symptom V0.1 format catalogs and the XPath Log Analyzer which uses Symptom V2.0 format. The Symptom 0.1 Log Analyzer uses match pattern rules and matches them against log record messages. The outcome of an analysis operation using the Symptom 0.1 Log Analyzer is an array of objects representing the solutions and directives for the matched symptoms. Once a log file is analyzed, the solution is reported in the Analysis Result pane, giving the customer advice on resolving the reported problem. The XPath Log Analyzer uses specialized symptom rules, that have XPath expressions associated, to analyze log records, more precisely org.eclipse.hyades.logging.events.cbe.ComonBaseEvent log records.

XPath expressions can be constructed based on org.eclipse.hyades.logging.events.cbe.ComonBaseEvent fields using the Symptom catalog editor's New XPath expression dialog. The outcome of an analysis operation using the XPath Log Analyzer is a list of symptoms that are displayed in the Symptom Analysis Results view.

To analyze a particular log record, in Log view, select it from the list of Log Records.
Right click and select Analyze Selection. By default analysis will be run using the XPath Log Analyzer. Users can also choose to create a different analysis configuration.
To analyze multiple log records, use the CTRL key to select the records. Right-click and select Analyze Selection
To analyze all log records, right-click, then select Analyze All, assuming the fact that a log analysis configuration was already created, as explained in the steps above.
If analyzing with the Symptom 0.1 Log Analyzer and a match is found in the symptom catalog, a solution information appears in the Analysis Result tab.
If analyzing with the XPath Log Analyzer and a match is found in the symptom catalog, a symptom is displayed in the Symptom Analysis Results view.

Note: The Log and Trace Analyzer provides a set of tools that can be used to implement additional log analyzers (analysis engines) that can be plugged into the workbench and used within the Log and Trace Analyzer.

Related concepts
Common Base Event model

Related reference
Log view
Symptom Analysis Results view