Advanced Features

This section describes advanced features in LogLogic LMI.

  • Advanced Search
  • Bloks: Filter, Correlation, and Time Bloks
  • Advanced Dashboards
  • Data Models
  • Enrichment Lists
  • Queries
    • Search Queries
    • Scheduled Queries
  • TAIL Queries
  • Rule Management: Triggers and Aggregation Rules
  • Monthly index
  • REST API support for Advanced Search
  • Exporting and Importing Configurations

By default, these features are disabled. A user with administrator privileges can enable the Advanced Features, or set up a High Availability pair for Advanced Features, or both. For more information on enabling the features or setting up High Availability, see the TIBCO LogLogic® Log Management Intelligence Administration Guide.

Note:
  • Advanced Features are not supported on:
    • A slave node in a high availability setup.

      However, Advanced Features are accessible using the public IP address or the IP address of the master node. Before configuring HA, you must disable Advanced Features on both master and slave appliances.

    • LogLogic LMI appliances with an IPv6-only configuration.
    • LX825, LX1025, ST1025, and MX3025 appliance models
  • Use caution when enabling advanced features on LX4025, ST4025, MX4025, ST2025-SAN, or LX1025R1 models, because the memory requirements of these features when in use might cause performance issues. Also, continuous use of Advanced Features on these models can cause the appliance to run out of memory and lead to engine restarts or failure.