Do you recognize a good idea when you see one? We want to hear from you!
Header Image

I suggest you ...

Logging: Global Search of Log Files

Add the ability to globally search all logs for matching strings from a single entry box for a specified date/time range.

82 votes
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
  • facebook
  • google
    Password icon
    I agree to the terms of service
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    darrelld3darrelld3 shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

    5 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      Submitting...
      • brahimbrahim commented  ·   ·  Flag as inappropriate

        It would be great to add this feature to help us search logs by a time range like from 10H to 11H (for example)

      • ThomasThomas commented  ·   ·  Flag as inappropriate

        Bobs Idea sounds even better!
        I am still missing a filter by "custom time" like: "last 20 minutes" in ALL log viewers, just "today" is useless if you already have some 100 MBs in a log.

      • Bob AlfsonBob Alfson commented  ·   ·  Flag as inappropriate

        Instead of a global search, I'd prefer the ability to hold down the Ctrl key to select a specific combination of files.

      • Christopher ThorjussenChristopher Thorjussen commented  ·   ·  Flag as inappropriate

        The problem here would be that splunk only supports 500MB of raw logs per day. More costs money - lots of money. But then again, we could always have a configureable what-to-log-to-splunk page, with some recommended settings.

        Btw - my packetfilter.log file is about 600MB a day on my ASG7 - and thats only with about 50 users and a few servers (at the office). I log everything though.

        Btw2 - perhaps Astaro could make a good deal with splunk and have them make a special version for Astaro which does not support normal input/forward as it normally does (enterprise edition needed for forwarding)

      Feedback and Knowledge Base