General Tab

Use the Administration > System Settings > General tab to configure system-wide settings.

The system settings automatically take effect after you click Update.
Note: Changes to certain settings might require restarting the appliance.
Related concepts
Related tasks
Related reference

General Settings

Field Description
Originating Email The email address that the appliance uses for the return address email notifications in alerts and scheduled reports.
Note: If this field or any of the SMTP settings field are changed, you must re-synchronize triggers.
Concurrent Login Sessions Indicates the maximum number of concurrent login sessions allowed for each LogLogic LMI user. After the permitted number of concurrent connections is reached, a message is displayed to the user on the next attempted login. The message indicates that the limit has been reached and requests the user to close one of the active sessions.

The default number of concurrent login sessions allowed per user is 100.

Note:
  • This value is applicable to all users in the system. For example, setting the value to 10 implies each user in the system can have at the most 10 concurrent sessions.
  • A full application restart is required for the changes to take effect. Follow the system prompts.
  • The limit on concurrent sessions is not applicable to the REST API used for Advanced Features.
  • After reaching the maximum number of concurrent login sessions, or when users abruptly end their login session, you can remove a user session from the Management > User Sessions tab.
Multiline Delimiter Sets a character string to be used as line delimiter in multiline logs.
Max. Widgets in My Dashboard The system administrator can specify the maximum number of widgets that can be displayed on the dashboard. The default is 10.

If the recommended number of widgets (10) on My Dashboard or the amount of data to be displayed inside each widget exceeds the recommended value of 10, there might be graphical errors in the data displayed

Purge stale devices Enables the option to purge stale devices based on the last time data was received. For more information, see Purge Stale Devices.
Purge Stale Devices Period Specify the number of days after which stale devices must be purged.
SSH Daemon at Startup The SSH Daemon provides access to the appliance's Command Line Interface (CLI) from SSH clients.

By default, the SSH Daemon is turned on in the appliance. Click the slider to No to disable the SSH Daemon when you reboot the appliance. For details about the Command Line Interface (CLI), see Command Line Interface (CLI).

Auto-identify Log Sources Automatically detects any syslog log sources connected to the appliance. This includes:
  • Multiple log sources sharing the same IP address.

    LogLogic LMI considers multiple sources using the same IP address as a single host, because LogLogic LMI uses the IP address to uniquely identify them.

  • Log sources whose log data is converted to syslog during collection
To view all identified log sources, use Management > Devices. If you do not enable this option, you must manually add the following log sources.
Note: If the Auto-identify Log Sources option detects a log source but does not recognize the exact type, the appliance adds it to the Management > Devices list as a general syslog log source.

To manually change a general Syslog log source type:

  1. In the Management > Devices tab, click the log source name.
  2. From the Device Type drop-down menu, select the specific device type.
  3. Click Update.

The Type column displays the device type you associated with the auto-identified log source.

If you enable Auto-identify Log Sources and you have several thousand devices configured that need to be auto-identified, routing rules and alerts can slow the auto-identify process down.

DNS Resolve All Device Names Updates the DNS Resolve Flag for multiple devices.
Note: If you select No, the Management > Devices > Apply this update to all devices, not just to those on this page check box overrides your General settings No option.
Full Text Indexing Allows indexing of data. You can set this for your appliances independently. If enabled, all data is indexed.
Note: Indexing uses additional storage.

To retain the index data, configure rules from Administration > Data Retention Rules.

To use message signatures and tags, you must enable indexing from Search > Index Search.

Allow Disabling of admin Super User Allows an admin user to disable the admin super user account. For more information, see Managing Users.
UI Verbose Logging Enables or disables logging detailed error messages on the GUI. The default value is Yes.

If you select No, detailed logging is disabled, and a generic message is displayed instead of error or exception details. You can view the detailed information in syslog files by accessing the machine through SSH.

Log parsing for reports Enable or disables parsing in LogLogic LMI, so that no content is added to the Real Time database-driven reports.

The default value is Yes.

This feature is only available on LogLogic EVA, LogLogic LX Appliances, and LogLogic MX Appliances, and in effect makes them similar to a LogLogic ST Appliance.

Manage Device Enables or disables the ability for users to configure or add devices under Management > Devices. This setting overrides the Manage Devices privilege provided to a user or role, except to the admin super user account.
Accept Detail Allows drill down for the Real Time and Summary detail reports.
Note:
  • This option is not available on LogLogic ST Appliances.
  • You must enable this option to view Reports > Network Activity > Accepted Connections > Network Activity > Application Distribution, and detail reports. This might require additional time and storage in downloading these reports.

Advanced Feature Settings

Field Description
Advanced Features Enables or disables the Advanced Features. The default is Off (disabled).

Select On to enable the following Advanced Features:

  • Advanced Search
  • Advanced Dashboards
  • Bloks: Filter, Correlation, and Time Bloks
  • Data Models
  • Enrichment Lists
  • Exporting and Importing Configurations
  • Monitoring Console
  • Monthly index
  • Queries
    • Search queries
    • Scheduled queries
    • Tail queries
    • Distributed Advanced Search queries
  • REST API support for Advanced Search
  • Rule Management:
    • Triggers
    • Aggregation rules
    • Distributed aggregation rules
Important Considerations
After enabling the advanced features, all sessions to the WebUI are disconnected for the period when the Tomcat engine restarts, after which users can login again.
  • Advanced Features are not supported on:
    • LogLogic LMI appliances with an IPv6-only configuration.
    • A standby node in a high availability setup.

      However, Advanced Features are accessible using the public IP address or the IP address of the master node. Before configuring HA, you must disable Advanced Features on both master and standby appliances.

  • Use caution when enabling Advanced Features on TIBCO LogLogic® LX1025R1 Appliance, because the memory requirements of these features when in use might cause performance issues. Also, continuous use of Advanced Features on this model can cause the appliance to run out of memory and lead to engine restarts or failure.
  • For information about the behavior of Advanced Aggregation and Monitoring Console features after upgrading to LogLogic LMI 6.3.0, see Upgrade Considerations in the TIBCO LogLogic® Log Management Intelligence Configuration and Upgrade Guide.

For information about enabling advanced features using the CLI, see the system logu command.

Monitoring Console Enables or disables the monitoring console. After enabling the monitoring console, the Monitoring > Console menu is available to users and they can use the monitoring console.

To enable or disable this feature using the CLI, see the system monitoring_console command.

Advanced Aggregation Enable or disable the Advanced Aggregation features. After enabling the Advanced Aggregation option, the Management > Rules > Aggregation tab is visible to users and they can use the Advanced Aggregation features.

By default, Advanced Aggregation is switched off.

This feature can be enabled only if the Advanced Features option is enabled.

If Advanced Aggregation is switched on before upgrading your setup, it remains switched on after the upgrade.

Important: Before disabling Advanced Aggregation, ensure that you delete or disable any advanced aggregation rules to avoid storing unnecessary aggregated data.

To enable or disable this feature using the CLI, see the system advanced_aggregation command.

Monthly Index Enables or disables the monthly index feature. The default is No.

This feature can be enabled only if the Advanced Features option is enabled.

For information about enabling monthly index using the Command Line Interface (CLI), see the system monthly_index command.

Monthly Index Load Divisor When the monthly index is so large that the memory issues occur when loading the terms during an Advanced Search and when Advanced Search and Monthly Index are both enabled, this parameter controls what fraction of the Monthly Index terms are loaded into memory during an Advanced Search.

The default value is 1 (load all terms) with a possible range of 1-5, where 5 indicates 1/5th, which means load only 20% of the terms in memory.

Note: Reducing the fraction of terms loaded into memory helps with memory issues. However, it has a performance impact on searches where no memory issues exist, because the frequency of disk access during an Advanced Search increases.

For information about configuring the monthly index using the CLI, see the system monthly_index_load_divisor command.