Index Search Settings

Tag Search—The default is Yes. Allows to select keywords within log messages and to use the Tag Search feature.
Timeout—The default is 10 minutes (600 seconds), allows user to set the timeout limit to retrieve Index Search results. Traditionally, this value was kept in a configuration file (/loglogic/tomcat/webapps/logapp20/WEB-INF/web.xml), now users can update this value from the GUI from the Admininistation > System Settings page. The value as seen on the GUI takes precedence over the web.xml file. Changing timeout values through the GUI requires no further action by the user, all necessary engines get the new values.
Message Encoding—The default is Windows-1252. Allows user to choose different message encoding formats. The options are: Windows-1252, ISO-8859-1, ISO-8859-15, ISO-8859-2, and UTF-8. Select UTF-8 to process logs from Japanese Windows 2008 R2, Windows 2008, or Windows 2003.
Note: You should not change the encoding to UTF-8 if you wish to parse non-UTF-8 logs.

Multithreading Parameters

Index search is multithreaded, and the behavior of multithreading is governed by the following configuration file:

/loglogic/tomcat/webapps/logapp20/WEB-INF/spring/index-search.properties

Independent of the number of threads, each thread works on a one-hour data bucket. The user cannot change the bucket size of 60 minutes.

If you change any value in the index-search.properties file, you must restart mtask by running the following commands:

$ mtask stop
$ mtask start

To take advantage of multithreading, the search range specified must be equal to or greater than the value of the index.search.parallel.minHours setting.

Note: These settings are not available on the GUI.

The following table lists the default values of the multithreading parameters:

Parameter	Description	Valid values	Default value
`index.search.parallel.enabled`	Enable/disable multithreaded index search	true, false	true
`index.search.parallel.minHours`	Minimum search time range in hours to trigger a multithreaded search Applicable only when `index.search.parallel.enabled=true`	value in hours	6
`index.search.parallel.numCountThreads`	Number of threads allocated for counting in a multithreaded search. Used in search to quickly navigate to the beginning offset of the page Applicable only when `index.search.parallel.enabled=true`	number of threads	3
`index.search.parallel.numSearchThreads`	Number of threads allocated for searching in a multithreaded search Applicable only when `index.search.parallel.enabled=true`	number of threads	3