The LogPoint Search Guide serves as your starting point for using the search functionality in LogPoint. The guide familiarizes you with the LogPoint Search interface, its components, and their functionalities.
LogPoint collects logs using different collectors and fetchers and stores them securely until the time specified in the system. You can search these logs using the LogPoint query language. You can further use the search results to create dashboard widgets, generate reports, and add alert rules. Using these features, you can monitor various compliance requirements, configure different correlation intelligence, and act on the incidents which require a prompt response. You can perform a search from the Search tab in the LogPoint user interface.
You can perform a search from the Search page in the LogPoint user interface.
The guide helps you to understand and perform the following tasks:
Create a dashboard widget from the search query. Refer to Add Search To Dashboard.
Add search query results to alert rule. Refer to Add Search To Alert Rule.
Add search query results to labelling rule. Refer to Add Search To Labelling Rule.
Add search query results to incidents. Refer to Add Search To Incident.
Add search query results to the public URL. Refer to Add Search To Public URL.
Add fields to the Interesting Fields window. Refer to Adding Interesting Fields.
Add a collection of saved searches. Refer to Adding a Search Package.
Add top search views. Refer to Adding a Search View.
Create a search template to store search queries with placeholders. Refer to Creating a Search Template.
Search saved searches. Refer to Searching a Saved Search.
Delete saved searches. Refer to Deleting a Saved Search.
Update the information on the Search Packages panel. Refer to Editing a Search Package.
Delete the search packages. Refer to Deleting Search Packages.
Update the information on the Search Templates panel. Refer to Editing a Search Template.
Delete the search templates. Refer to Deleting Search Templates.
Clone the saved search queries. Refer to Cloning Saved Searches.
Register the saved searches from Public API. Refer to Registering from a Public API.
Export the search packages. Refer to Exporting Search Packages.
Import the search packages. Refer to Importing Search Packages.
Share the search packages with other users. Refer to Sharing Search Packages with other users.
Clone the search packages. Refer to Cloning Search Packages.
Export the search templates. Refer to Exporting Search Templates.
Import the search templates. Refer to Importing Search Templates.
Share the search templates. Refer to Sharing Search Templates.
Clone the search templates. Refer to Cloning Search Templates.