• What's New in This Release
• Web Services API Reference Guide
  • Important Information
  • TIBCO Documentation and Support Services
  • Overview of the Web Services API
  • Alert Service Operations
    • createAlert Operation
    • createAlertRemote Operation
    • readAlert Operation
    • readAlertRemote Operation
    • updateAlert Operation
    • updateAlertRemote Operation
    • deleteAlert Operation
    • deleteAlertRemote Operation
    • getList Operation
    • getListRemote Operation
    • alertResponse Type
    • getAlertHistory Operation
    • acknowledgeAlertHistoryByKey Operation
    • removeAlertHistoryByKey Operation
    • removeAlertHistory Operation
    • alertHistoryResponse Type
    • Common Request Parameters
    • Alert-Specific Request Parameters
      • Adaptive Baseline Alert
      • Cisco PIX/ASA Message Alert
      • Message Volume Alert
      • Network Policy Alert
      • Pre-Defined Search Filter Alert
      • Ratio Based Alert
      • System Alert
      • VPN Connections Alert
      • VPN Messages Alert
      • VPN Statistics Alert
  • Device Service Operations
    • createDevice Operation
    • createDeviceRemote Operation
    • readDevice Operation
    • readDeviceRemote Operation
    • updateDevice Operation
    • updateDeviceRemote Operation
    • deleteDevice Operation
    • deleteDeviceRemote Operation
    • getList Operation
    • getListRemote Operation
    • deviceResponse Type
    • Common Request Parameters
  • Device Group Service Operations
    • createDeviceGroup Operation
    • createDeviceGroupRemote Operation
    • addDevices Operation
    • addDevicesRemote Operation
    • removeDevices Operation
    • removeDevicesRemote Operation
    • readDeviceGroup Operation
    • readDeviceGroupRemote Operation
    • updateDeviceGroup Operation
    • updateDeviceGroupRemote Operation
    • deleteDeviceGroup Operation
    • deleteDeviceGroupRemote Operation
    • getList Operation
    • getListRemote Operation
    • deviceGroupResponse Type
    • Common Request Parameters
  • Message Routing Service Operations
    • createMsgRouting Operation
    • createMsgRoutingRemote Operation
    • readMsgRouting Operation
    • readMsgRoutingRemote Operation
    • updateMsgRouting Operation
    • updateMsgRoutingRemote Operation
    • deleteMsgRouting Operation
    • deleteMsgRoutingRemote Operation
    • getList Operation
    • getListRemote Operation
    • msgRoutingResponse Type
    • Common Request Parameters
  • Search Filter Service Operations
    • createSearchFilter Operation
    • createSearchFilterRemote Operation
    • readSearchFilter Operation
    • readSearchFilterRemote Operation
    • updateSearchFilter Operation
    • updateSearchFilterRemote Operation
    • deleteSearchFilter Operation
    • deleteSearchFilterRemote Operation
    • getList Operation
    • getListRemote Operation
    • searchFilterResponse Type
    • Common Request Parameters
  • User Administration Service Operations
    • createUser Operation
    • createUserRemote Operation
    • readUser Operation
    • readUserRemote Operation
    • updateUser Operation
    • updateUserRemote Operation
    • deleteUser Operation
    • deleteUserRemote Operation
    • getList Operation
    • getListRemote Operation
    • userResponse Type
    • Common Request Parameters
  • System Service
    • Get Appliance System Info Operation
  • Report and Search Service
    • Get Report Operation
      • Get Report Request Parameters
      • Specifying Filters for Index Searches
      • Date/Time Formats for getReport
      • Get Report Response Attributes
    • Get Template Report List Operation
    • Get Custom Report List Operation
    • Get Report Meta Info Operation
    • Get Detail Report Meta Info Operation
  • Authentication Service API
    • GetAuthenticationToken Operation
  • Reference Lists
    • Alert Types
    • Message Areas
    • User Administration Privileges
• Enterprise Virtual Appliance Quick Start Guide
  • Important Information
  • TIBCO Documentation and Support Services
  • Introduction to TIBCO LogLogic® Enterprise Virtual Appliance
    • Device Support
      • Configuring Requirements for 100,000 Devices
    • LogLogic EVA Download Site
  • Installing LogLogic EVA
  • Configuring the LogLogic EVA
    • Connecting the Virtual Appliance to a Network
    • Logging in to the Virtual Appliance
    • Setting the Time Zone and Time
  • Additional Configurations for LogLogic EVA
    • Updating EVA Virtual Machine Hardware Version
  • Import LogLogic EVA to Amazon Web Services (AWS)
    • Enabling Password Authentication
    • Importing into AWS
  • Backup, Restore, and Archive in AWS
    • Configuring Server and Client within the Same VPC Subnet
    • Configuring Server and Client in Different VPC Subnets
  • LogLogic EVA Dynamic Memory Configurations
• User Guide
  • Important Information
  • TIBCO Documentation and Support Services
  • LogLogic Appliance Overview
    • Appliance Functions
    • LogLogic Product Families
      • LogLogic LX Product Family
      • LogLogic MX Product Family
      • LogLogic ST Product Family
      • LogLogic® EVA
      • Scalable Infrastructure
  • Viewing Dashboards
    • Viewing System Status
    • Viewing Multiple Systems Status (Management Station)
      • Viewing Message Rate
      • Viewing CPU Usage
    • Viewing Log Source Status
      • Log Source Status Descriptions
      • Viewing Unapproved Messages
      • Viewing Recent Messages
    • Viewing the Log Source Data Trend
    • Management of Your Dashboard
      • Widget Types
      • Viewing My Dashboard
      • Widgets
        • Summary Widgets
          • Adding an existing summary widget to your dashboard
          • Creating a New Summary Widget
          • Editing an existing summary widget’s settings
        • Trend Widgets
          • Adding an existing trend widget to your dashboard
          • Creating a new trend widget
          • Editing an existing trend widget’s settings
        • Alert Widgets
          • Adding an existing alert widget to your dashboard
          • Creating a new alert widget
          • Editing an existing alert widget’s settings
        • System Widgets
          • Adding a system widget to your dashboard
      • Defining your Dashboard Canvas Settings
  • The Real Time Viewer
    • Access to Real Time Messages
      • Running the Real Time Report
      • Running a previously saved report in the Real-Time Viewer
      • Specifying Parameters to Run a New Report in the Real-Time Viewer
      • Saving a Custom Report in the Real-Time Viewer
      • Log Messages in Real Time
    • Configuring the Java Security Settings
    • Modifying your Java settings
  • Search for Collected Log Messages
    • Search Overview
    • Index Search
      • Search Expression Rules
      • Running an Index Search
      • Selection of Specific Log Sources
      • Running a Targeted Index Search
      • Selecting Time Frame for an Index Search
      • The Search Results Tab
        • Viewing search results
        • Configuring Search Results Settings
        • Search Results Options
        • Viewing Index Search Results In Context
        • Search Results: Download Options
        • Saving Search Results Report
      • Trends
        • Viewing trends over time
      • The Search History Tab
        • Saving an Index Search as a Filter
        • Running a Previously Saved Search Expression
      • The Search Filters Tab
        • Viewing or Using a Previously Saved Index Search Filter
      • The Clipboard Tab
        • Adding a New Clipboard
        • Viewing or Editing Clipped Messages
        • Deleting Clipped Messages
      • Using the Tag Picker Interface
    • Regular Expression Search
      • Specifying Parameters for a New Search
      • Generating a previously saved report
      • Saving a Custom Report
      • Using Distributed Regular Expression Search
      • Distributed RegEx Search Results
      • The Pending Searches Tab
        • List of Running Searches
        • List of Pending Searches
      • RegEx Search Results
    • Search Filters
      • Adding a Search Filter
        • Search Filter Options
        • Putting Your Logins Search Filter to Work
        • Additional Parameters to a Pre-Defined Regular Expression Search Filter
        • Creating a Multi-Parameter Pre-Defined Regular Expression Search Filter
        • Modifying a Search Filter
    • All Saved Searches
    • Using and Creating All Index Reports
  • Alerts
    • View and Handle Alerts
      • Filtering and Viewing Alerts
      • Paging Through Alerts
      • Acknowledge, Print, or Remove Alerts
    • Manage Alert Templates
      • Adding a New Alert Template Format
      • Viewing and Modifying an Alert Template
      • Removing an Alert Template
    • Manage Alert Rules
      • Preconfigured System Alerts
      • Adding a New Alert Rule
      • Creating Parsed Data Alerts
      • Modifying or Removing An Alert
  • Real-Time Reports
    • Selecting Sources and Search Filters
    • Selecting Time Frame and Running a Report
    • Operations on the Reports
    • Modifying Report Settings and Time Frame
    • Formats for Saving a Generated Report
    • Rerunning a Saved Report
    • Generating a Report: An Example - Denied Connections Report
      • Rerunning and Editing settings of a previously saved report (Denied Connections)
    • Available Operators
    • Access Control Reports
      • Permission Modification Reports
      • User Access Reports
      • User Authentication Reports
      • User Created/Deleted Reports
      • User Last Activity Reports
      • Windows Events Reports
    • Database Activity Reports
      • All Database Events Reports
      • Database Access Report
      • Database Data Access Report
      • Database Privilege Modifications Report
      • Database System Modifications Report
    • IBM i5/OS Activity Reports
      • All Log Entry Types Reports
      • System Object Access Reports
      • User Access by Connection Reports
      • User Actions Reports
      • User Jobs Reports
    • Threat Management Reports
      • IDS/IPS Activity Reports
      • Threat Activity Reports
      • Configuration Activity Reports
      • Scan Activity Reports
      • Security Summary Reports
      • DB IPS Activity Reports
      • HIPS Activity Reports
    • Mail Activity Reports
      • Exchange 2000/03 SMTP Reports
      • Exchange 2000/03 Activity Reports
      • Exchange 2000/03 Delay Reports
      • Exchange 2000/03 Size Reports
      • Server Activity Reports
      • Exchange 2007/10 Activity Reports
      • Exchange 2007/10 Mail Size Reports
    • Network Activity Reports
      • Accepted Connections Reports
      • Active FW Connections Reports
      • Active VPN Connections Reports
      • Application Distribution Reports
      • Denied Connections Reports
      • FTP Connections Reports
      • VPN Access Reports
      • VPN Sessions Reports
      • VPN Top Lists Reports
      • Web Cache Activity Reports
      • Web Surfing Activity Reports
      • DHCP Activity Report
      • DHCP Granted/Renewed Activity Reports
      • DHCP Denied Activity Report
      • NAT64 Activity Reports
    • Operational Reports
      • All Unparsed Events Reports
      • Firewall Statistics Reports
      • Total Message Count Reports
      • Security Events Reports
      • System Events Reports
      • VPN Events Reports
    • Policy Reports
      • Check Point Policies Reports
      • Network Policies Reports
      • Rules/Policies Reports
      • ECM Policy Reports
    • Enterprise Content Management Reports
      • ECM Activity Reports
      • Content Management Reports
      • Security Settings Reports
      • Expiration and Disposition Reports
    • HP NonStop Audit
      • Configuration Changes Reports
      • Failed and Successful Logins Reports
      • Object Changes Reports
      • HP NonStop Audit Activity Reports
      • User Actions Reports
      • Object Access Report
    • IBM z/OS Activity
      • Resource Access Reports
      • Security Modifications Reports
      • System Access/Configuration Reports
      • Unix System Services Reports
      • Login/Logout Reports
      • Violation Reports
    • Storage Systems Activity Reports
      • Filer Access Reports
    • Flow Activity Reports
      • Application Usage Reports
      • User Browsing Reports
      • Top Users Reports
    • All Saved Reports
  • User Preferences
    • Viewing Your LogApp Account
    • Changing the Login Landing Page
    • Changing the Account Password
  • Advanced Features
    • Advanced Search - Overview
      • Infrastructure Queries
        • Query for Fetching the Advanced Application Pack (AAP) Schema
      • Content Assist
      • The Search Field
      • The Time Field
      • Monthly Index
      • TAIL Queries
    • Search Results
      • Charts
      • Columns
      • Types of Columns
      • Data
        • Raw Data Format
        • Table Format
    • Queries
      • Scheduled Queries
        • Adding Scheduled Queries
        • Configuring Query Schedules
      • Search Queries
    • Enrichment Lists
      • Creating an Enrichment List
      • Editing an Existing Enrichment List
    • Bloks
      • Filter Bloks
      • Correlation Bloks
        • Using Correlation Bloks in Advanced Search
      • Time Bloks
        • Viewing All Time Bloks
        • Adding a Time Blok
        • Modifying Time Bloks
      • Management of Bloks
        • Viewing All Bloks
        • Adding a Blok
        • Modifying a Blok
        • Deleting a Blok
    • Rule Management
      • Manage Triggers
      • Aggregation Rules
        • Viewing Aggregation Rules
        • Adding an Aggregation Rule
        • Editing an Aggregation Rule
        • Deleting an Aggregation Rule
        • Enabling or Disabling Aggregation Rules
    • Manage Advanced Alerts
      • Viewing Advanced Alerts
      • Acknowledging Alerts
      • Viewing Alert Details
      • Viewing Event Group Details
    • Manage Advanced Dashboards
      • View Advanced Dashboards
      • Adding Widgets to a Dashboard
        • Line Widget
        • Bar Widget
        • Pie Widget
        • Number Widget
        • Gauge Widget
        • Stacked Column Widget
        • Combined Widget
        • Treemap Widget
        • Heat Map Widget
        • DataGrid Widget
      • Editing a Widget
      • Deleting a Widget
      • Duplicating an Advanced Dashboard
      • Deleting an Advanced Dashboard
      • System Status Dashboards
    • Data Models
      • View Data Models
      • Adding a Data Model in Graphical Mode
        • Defining a Source Filter
        • Adding a Parsing Rule
        • Editing Parsing Rules
        • Defining Parsing Rules Order
        • Copying Parsing Rules
        • Deleting Parsing Rules
        • Managing Columns
      • Adding a Data Model in Raw Mode
      • Enabling or Disabling Data Models
      • Editing Data Models
      • Duplicating Data Models
      • Deleting Data Models
    • REST API
      • REST Request Format
      • REST API Endpoint (baseurl)
      • Response Status Codes
    • REST API Support for Advanced Search
      • Query Creation
      • API to Retrieve the Results
      • API to Delete a Query
      • Sub-Queries
  • Universal Lossless Data Protocol Library
    • Connection Parameters
    • ULDP Log Types
    • Sample Tools
    • Setting Up a Secure Connection With ULDP
  • Syslog Host Field Character Sets
    • Exceptions
  • Supported Regular Expression Characters
  • Search Syntax Reference
    • Event Query Language Reference
      • Common Search Commands
      • USE Statement
      • FILTER Statement
      • Predefined Functions
      • Time Range Expressions
      • COLUMNS Statement
      • GROUP BY Statement
      • SORT BY Statement
      • LIMIT Statement
      • Query Optimization for Better Performance
      • Text Search
      • Search Examples
    • Event Correlation Language Reference
      • Rule Structure
      • Identifier Environment
      • Event Group
      • Correlation Criteria
      • Correlation Blok (ECL) Examples
  • Reserved Keywords
  • Field Restrictions
• Syslog Alert Message Format Reference Guide
  • Important Information
  • TIBCO Documentation and Support Services
  • Overview
    • Format of Syslog Messages
  • SYSLOG HEADER Components
  • LogLogic ID
  • Common Alert Message Attributes
  • Alert-Specific Message Attributes
    • ADAPTIVE_BASELINE_ALERT
    • CISCO_PIX/ASA_MESSAGES_ALERT
    • MESSAGE_VOLUME_ALERT
    • NETWORK_POLICY_ALERT
    • PRE_DEFINED_SEARCH_FILTER_ALERT
    • RATIO_BASED_ALERT
    • SYSTEM_ALERT
      • CPU_TEMPERATURE_ALERT
      • MIGRATION_COMPLETE_ALERT
      • DISK_USAGE_ALERT
      • DROPPED_MESSAGE_ALERT
      • FAILOVER_ALERT
      • NETWORK_CONNECTION_SPEED_ALERT
      • NETWORK_INTERFACE_ALERT
      • RAID_DISK_FAILURE_ALERT
      • RESOURCE_EXHAUSTION_ALERT
      • SYNCHRONIZATION_FAILURE_ALERT
      • TCP_FORWARD_CONNECTION_ALERT
      • TCP_FORWARD_FALLING_BEHIND_ALERT
    • VPN_CONNECTIONS_ALERT
    • VPN_MESSAGES_ALERT
    • VPN_STATISTICS_ALERT
• Configuration and Upgrade Guide
  • Important Information
  • TIBCO Documentation and Support Services
  • Appliance Software Configuration
    • Setting Up the Appliance by Using a Browser
      • Connecting the Appliance to a Network
      • Logging in to the Appliance
      • Configuring Network Settings
      • Setting the Time Zone and Time
    • Setting up the Appliance by Using the Console
  • Appliance Software Upgrade
    • IMPORTANT: Upgrade Warnings
      • LogLogic LSP Support
    • Updating the Appliance
      • Updating the TIBCO LogLogic® Appliance by Using File Update
    • Running the Post Upgrade Script
    • Upgrading in a High Availability Environment
    • Recovering from Failed Migration
• Hardware Installation Guide
  • Important Information
  • TIBCO Documentation and Support Services
  • Overview and Installation
    • Unpack and Verify Parts in the Kit
    • Installing System in a Rack
      • Installing and Removing Tool-less Rails
      • Installing and Removing Tooled Rails
      • Installing the System in a Rack
      • Removing the System From the Rack
      • Engaging and Releasing the Slam Latch
      • Routing the Cables
    • Installation of the Cable Management Arm (CMA)
      • Identifying the Cable Management Arm Kit Contents
      • Installing and Removing the CMA Tray
      • Installing the CMA Attachment Brackets
      • Installing and Removing the CMA
      • Moving the CMA Away from the CMA Tray
      • Cabling the System by Using the CMA
    • Optional—Connecting the Keyboard, Mouse, and Monitor
    • Connecting and Securing the Power Cables
    • Removing the Front Bezel
    • Powering up the Appliance
    • Logging into the Appliance
  • Integrated Dell Remote Access Controller
    • Logging in to iDRAC
    • Configuring Local Users
    • Configuring Internet Explorer
  • Updating the Firmware
    • Updating the integrated Dell Remote Access Controller (iDRAC) Firmware
    • Updating the BIOS Firmware
      • Updating the BIOS Firmware on H5 Appliances
      • Updating the BIOS Firmware on H4 Appliances
  • External Hardware Descriptions
    • H5 Appliances
      • LX Product Family
        • LX1035 Appliance
        • LX4035 Appliance
      • ST Product Family
        • ST2035-SAN and ST4035 Appliances
    • H4 Appliances
      • LX R2 Product Family
        • LX1025R2 Appliance
        • LX4025R2 Appliance
      • LX R1 Product Family
        • LX1025R1 Appliance
        • LX4025R1 Appliance
      • LX Product Family
        • LX825 Appliance
        • LX1025 Appliance
        • LX4025 Appliance
      • ST R2 Product Family
        • ST2025-SANR2 Appliance
        • ST4025R2 Appliance
      • ST R1 Product Family
        • ST2025-SANR1 Appliance
        • ST4025R1 Appliance
      • ST Product Family
        • ST1025 Appliance
        • ST2025-SAN Appliance
        • ST4025 Appliance
      • MX Product Family
        • MX3025 and MX4025 Appliances
• Administration Guide
  • Important Information
  • TIBCO Documentation and Support Services
  • LogLogic Appliance Overview
    • Appliance Functions
    • LogLogic Product Families
      • LogLogic LX Product Family
      • LogLogic MX Product Family
      • LogLogic ST Product Family
      • LogLogic® EVA
      • Scalable Infrastructure
  • Manage Appliances with Management Station
    • Introduction to Management Stations
      • Management Station Clusters
    • Creating a Management Station Cluster
    • Addition of Appliances to a Management Station Cluster
    • Management of Appliances from a Management Station
      • Performing Tasks on a Remotely Managed Appliance
      • Monitoring all Managed Appliances at Once
      • Tasks using Managed Appliance Log Data
      • Designating a Management Station Appliance as Current
      • Managed Station Status
      • Management Station and Regular Appliance Features
        • Managed Appliance - Administration Tasks
        • Managed Appliance - Configuration Tasks
        • Management Appliance - User Tasks
  • Log Source Management
    • Device Management
      • Collector Domain
      • Viewing Devices
      • Adding or Modifying Log Sources
      • Copying a Device
      • Updating the Device Type
      • Updating Device Name Resolution
      • Removing Devices
    • File Transfer Rules
      • File Transfer Protocols
      • Compressed Files Collection
      • Adding a Log Source for File Transfer
      • File Transfer Rules
        • Adding File Transfer Rules
        • Removing File Transfer Rules
      • File Collection Parallelism - Overview
        • Changing the Degree of Parallelism
      • Configuring Parallel File Processing and Parallel File-Forwarding
      • File Collection Merging
    • Device Group Management
      • Adding or Modifying a Device Group
      • Removing Device Groups
  • Device Types Management
    • Viewing the Device Type
    • Adding a New Device Type
    • Editing or Removing Device Types
    • Importing Device Types
    • Exporting Device Types
  • Check Point Log Sources
    • Management of Check Point Log Sources
      • Propagation of LEA Server Definitions
    • Adding an LEA Server
    • Adding a Separate LEA Firewall
    • Adding a Separate LEA Interface
  • Message Signatures
    • Creating Message Signatures
    • Exporting Message Signatures
    • Importing Message Signatures
  • Management of Tag Catalog
    • Adding User-Defined Field Tags
      • Editing or Removing An Existing Field Tag
    • Adding Event Types
      • Editing or Removing An Existing Event Type
  • Column Manager - Overview
    • Accessing the Column Manager
    • Hiding Columns
    • Showing Columns
    • Exporting a Configuration File
    • Importing a Configuration File
    • Generating a Reports Summary
  • Management of PIX/ASA Message Codes (LX, MX Only)
    • Enabling Cisco PIX/ASA Message Codes
    • Mapping Cisco Log Source Names to IP Addresses
  • Management of Port Descriptions (LX, MX Only)
    • Adding Ports
    • Modifying Ports
    • Removing Ports
  • File Transfer History
    • File Transfer: Date and Time Formats
      • Blue Coat ProxySG
      • Cisco ACS
      • Generic W3C
      • Microsoft IAS
      • Microsoft ISA
      • NetApp NetCache
      • Other File Devices
      • RSA ACE Server
      • Squid
  • Forwarding Logs to Other Appliances (Routing)
    • Configuring an Appliance for Message Routing
    • Outbound Routing Rules
      • Adding Destinations to the All Sources Rule
      • Creating a New Outbound Routing Rule
      • Addition of Destinations to the Existing Routing Rule
      • Editing Routing Rules
      • Editing Filters
      • Editing Log Sources
      • Removing Routing Rules or Destinations
      • Removing Destinations
  • Replay of Archived Data
    • How Replay Works
      • Configuration of Replay Environment
      • Data Retention
      • Configuring the Replay Session to Use Authentication
    • Configuration of Appliances to Replay Archived Data
      • Configuring the LX Appliance
        • Configuring the LX Appliance to Analyze Data
        • Clearing All Log Data from the LX Appliance
      • Configuring the ST Appliance
        • Setting Up a Management Station Relationship
        • Adding a Replay Rule
        • Modifying a Replay Rule
    • Replay of Archived Data
      • Scheduling a Replay Session
      • Viewing Replay Progress
      • Canceling a Replay Session
  • Backup and Restore
    • Backup and Restore Architecture
      • Backup Methods (SCP, NFS, and SAN)
      • Backup Interfaces
      • What is Backed Up?
      • How Backup/Restore Works
      • Differences between LX/ST/MX Appliance Backup
      • Backup Storage
    • Backup and Restore Scenarios
      • Single System Backup
      • Single System Restore
      • High Availability Backup
      • High Availability Restore
      • Disaster Recovery Backup
      • Disaster Recovery Restore
    • Backup Recommendations
    • SCP Backup
      • Configuring SCP Backup
      • Running Scheduled or Immediate SCP Backups
    • NFS Backup
      • Running Scheduled or Immediate NFS Backups
    • SAN Backup
      • Running Scheduled or Immediate SAN Backups
    • Monitoring Backup Status
      • Backup Errors
    • Restoring an Appliance
    • Backup and Restore in an HA Pair
  • Viewing Log Files
    • Verifying the SHA Digest on Data Files
  • Archiving of Log Data (ST and LogLogic EVA Only)
    • How Archive Storage Works
      • Storage Volume Watermarks
      • NAS SnapLock Protection
      • External Storage in an HA Pair
      • Enabling a Node ID in the Archive Path
    • Configuring NAS Server Storage
    • Configuring SAN Archive Storage
      • Supported Cable Distances
    • Configuring EMC Centera Storage
  • Data Retention Rules
    • Viewing Retention Rule Details
    • Creating a New Retention Rule
    • Modifying Rule Settings
      • Assigning Log Sources to a Data Retention Rule
      • Prioritizing Custom Rules
    • Deleting a Custom Rule
  • Working with Suites
    • Managing Suites
    • Viewing Existing Suites and Reports
    • Creating a Suite
      • Adding Components to a Suite
    • Modifying a Suite
      • Updating Details of a Suite
      • Removing Components from a Suite
      • Deleting a Suite
  • Import or Export Entities Between Appliances
    • Importing Entities using the GUI
      • Selecting a file to import
      • Importing Entities
    • Exporting Entities to XML using the GUI
      • Exporting to a File
    • Export and Import Configurations using the CLI
      • Export Commands
      • Import Commands
  • Alert Receivers
    • Adding a New Alert Receiver
    • Modifying an Alert Receiver
    • Removing an Alert Receiver
  • Configuration for Advanced Alerts
  • Enrichment Lists
    • Creating an Enrichment List
  • Report Settings
  • System Settings
    • General Settings
      • Syslog Port
      • Secure ULDP Settings
      • Multi Line Log Delimiter
      • Maximum Number of Widgets in My Dashboard
      • Data Privacy Options
        • Enabling Data Privacy Mode
        • Disabling the Data Privacy Mode
        • Reset Security Key
      • Index Search Options
      • Global Retention Settings: Raw and Indexed Data
      • Scheduled Report Settings
      • SNMP Trap Sink
      • SNMP Trap Collector
      • System Performance Settings
      • Custom Logo Upload
      • Usage Count
      • Build Details
    • Remote Servers
      • Configuring SMTP
      • Setting up a Remote Authentication Server
      • Setting up TACACS or RADIUS
      • Setting up Active Directory
    • Database Table Retention (LX, MX, LXvirtual, MXvirtual Only)
      • Changing the Database Purging Threshold
    • Setting the Time Zone
    • Customizing the Login Page
    • Password Control
    • Archive Mapping (ST and LogLogic EVA Only)
    • Archive Config Tab (ST and LogLogic EVA only)
  • User Accounts
    • Managing Users
      • Users Tab
      • User Devices/Privileges Report Tab
      • User Sessions Tab
    • Adding or Modifying a User
      • Defining or Updating Users
      • User Privileges
      • List of User Privileges
      • Associating Users with Log Sources
    • Removing a User
    • Adding or Modifying Users on a Managed Appliance
    • Replicating Users on a Managed Appliance
    • User Roles
    • Adding or Modifying a Role
      • Configuring General Settings for a Role
      • Role Privileges
      • Associating Devices
      • Configuring the Appliance Settings
    • Removing a Role
  • Network Settings
    • Configuration Tab
    • Static Routes Tab
    • Configuring your Network Settings
      • Configuring for a Multi-homed Network
    • Viewing Static Routes
      • Adding IPv4 Static Routes
      • Adding IPv6 Static Routes
      • Removing Static Routes
  • Network Access Control
    • Firewall Settings
    • TCP Collector Settings
    • Adding an Input Rule
    • Deleting an Input Rule
  • SSL Certificate Management
    • Creating and Activating LogLogic Signed Certificates
    • Signing the Certificate Using a CA
    • Importing Certificates and a Private Key
    • Generating a Trusted Certificate
  • Universal Collection Framework Secure Mode Setup
    • Installing LogLogic LMI csr certificate and rootCA certificate
  • Failover
    • Failover Architecture
      • Public and Private IP Addresses
      • Failover and External Storage
      • Failover and Backup/Restore
      • Failover Software Layers
      • Failover Membership
      • Real-Time Replication
      • Node Resynchronization
    • Failover Recommendations
      • Failover Performance
      • Failover Limitations
    • Failover Installation and Configuration
      • Hardware Installation
      • Setting up the Failover (New HA Pair)
      • Setting up Failover with a different interface
      • Software Setup (Replacing a Single Node)
      • Setting up the Software to Replace an HA Pair
    • Failover Management
      • Failover Warnings
      • HA Software Upgrade
    • Node Failure and Recovery
      • Node Failure
      • Recovering the Active or Standby Node
      • Double Failure
  • Data Migration Between Appliances
    • When to Migrate Data
      • Data Migration on High Availability Appliances
      • Configuring the Source Appliances
      • Configuring the New Appliance
      • Monitoring the Migration
      • Finishing the Migration
  • Software Update and Diagnostics
    • Update the Appliance Software
      • Using File Update
    • RAID Status
    • System Summary for Diagnostics
      • Process List
      • Network
      • SAN
      • DB Table Status
      • Centera Status (ST Only)
      • Kernel Ring Buf
      • Restart/Reboot/Shutdown
    • Removal of Appliance Log Data
    • Destroying LogLogic LMI Event Data
  • Forwarding Data to LogLogic® Unity
    • Creating a New Outbound Routing Rule
    • Adding Destinations to the All Sources Rule
  • IPv6 Support
    • About IPv6
      • IPv6 Address Formats
      • LogLogic Support for IPv6
      • IPv6 Support Matrix
    • Configuring Oracle JDBC Driver for IPv6 Support
  • Command Line Interface (CLI)
    • Connecting to the Appliance
    • exit Command
    • llshred Command
    • network Command
    • plugin Command
    • raid Command
    • save Command
    • set Command
    • show Command
    • swraid Command
    • system Command
    • unset Command
    • watch Command
    • Health Monitoring Utility
  • Simple Network Management Protocol (SNMP)
    • Enabling SNMP
    • Management Information Base
    • Sample Object IDs
    • Supported Object IDs
    • List of Available Traps
      • Other Traps
      • LX or MX Trap Attributes
      • ST Trap Attributes
  • Definition of Configuration Rule Files
    • Additional Options in the Configuration Rule File
    • Examples of Configuration Rules
    • Defining a Configuration Rule File
  • Configuration of LogLogic iDRAC
  • LogLogic LMI Ports
    • Port Assignments
  • Field Restrictions
• XML Import/Export Entities Reference Guide
  • Important Information
  • TIBCO Documentation and Support Services
  • Manual Identification of Entities for Import
    • Editing an Exported XML File Manually
    • Description and Usage of XML Tags
      • Common XML Tags
      • Alerts
      • Custom Reports
      • Devices and Device Groups
      • Suites
      • Search Filters
      • Users
      • Alert Templates
    • Example: Devices XML File
• Log Source Report Mapping Guide
  • Important Information
  • TIBCO Documentation and Support Services
  • Overview
  • Log Source Report Mapping for Access Control
  • Log Source Report Mapping for Database Activity
  • Log Source Report Mapping for Enterprise Content Management
  • Log Source Report Mapping for HP NonStop Audit
  • Log Source Report Mapping for IBM i5/OS
  • Log Source Report Mapping for IBM z/OS Activity
  • Log Source Report Mapping for Mail Activity
  • Log Source Report Mapping for Network Activity
  • Log Source Report Mapping for Operational
  • Log Source Report Mapping for Policy Reports
  • Log Source Report Mapping for Storage Systems Activity
  • Log Source Report Mapping for Threat Management
  • Log Source Report Mapping for Flow Activity
• SSD Hardware Field Installation Guide
  • Important Information
  • TIBCO Documentation and Support Services
  • Overview
    • Installing New SSD Drives
    • Re-imaging the Appliance with an SD Card
    • Setting the Boot Order