Work with Log Miner

Log Miner has some powerful drill down and filtering capabilities to make narrowing the viewed data easy.

Drill Down

1. Create a new Investigation with LogMart as the search type.

2. When Log Miner appears with the results, do any of the following:

   • In the Log Message Occurrences by Day and Hour of Day pane, double-clicking one day's colored shape causes Log Miner to drill down to that day.

   • In the Log Message Occurrences by Day of Week and Hour of Day pane, double-clicking one hour's pillar causes Log Miner to drill down to that hour.

   • In the Log Message Occurrences by Hour pane, double-clicking a bar in the timeline "zooms in", narrowing the visible time span.

   • In the Aggregate Log Messages pane, select an entry, right-click the selection, click Action, and then click Filter In Selected Logs. Log Miner drills down to that aggregate occurrence.

Filter

Filtering is possible by using the Day of Week and Hour of Day Filter pane to specify exactly the time periods to see.

1. Create a new Investigation with LogMart as the search type.

2. When Log Miner appears with the results, click the Day of the Week and Hour of Day Filter tab in the lower-left corner of the window.
   The filter panel slides up from the bottom.

3. Select and clear check boxes to configure the day and hour of day filter you want to apply.

4. Click Apply.

5. (Optional). Use the buttons in the toolbar to browse through filtered views.

   • ViewFirst. This button returns the Log Miner view to its initial state, which was likely unfiltered.

   • ViewBack. This button steps back to the previous level of filtering, before the current view.

   • ViewForward. After using the ViewFirst or ViewBack button, this changes to the next forward filter from the current view.

   • ViewLast. After using the ViewFirst or ViewBack button, this changes the filtering to the last completed filter, at the end of the chain.