• What's New in This Release
• TIBCO Documentation and Support Services
• Hardware Installation Guide
  • Overview and Installation
    • Unpack and Verify Parts in the Kit
    • Installing System in a Rack
      • Installing and Removing Tool-less Rails
      • Installing and Removing Tooled Rails
      • Installing the System in a Rack
      • Removing the System From the Rack
      • Engaging and Releasing the Slam Latch
      • Routing the Cables
    • Installation of the Cable Management Arm (CMA)
      • Identifying the Cable Management Arm Kit Contents
      • Installing and Removing the CMA Tray
      • Installing the CMA Attachment Brackets
      • Installing and Removing the CMA
      • Moving the CMA Away from the CMA Tray
      • Cabling the System by Using the CMA
    • Optional—Connecting the Keyboard, Mouse, and Monitor
    • Connecting and Securing the Power Cables
    • Removing the Front Bezel
    • Powering up the Appliance
    • Logging into the Appliance
  • Integrated Dell Remote Access Controller
    • Logging in to iDRAC
    • Configuring Local Users
  • Updating the Firmware
    • Updating the integrated Dell Remote Access Controller (iDRAC) Firmware
    • Updating the BIOS Firmware
      • Updating the BIOS Firmware on H5 Appliances
      • Updating the BIOS Firmware on H4 Appliances
  • External Hardware Descriptions
    • H5 Appliances
      • LogLogic LX Appliance Product Family
        • LX1035 Appliance
        • LX4035 Appliance
      • LogLogic ST Appliance Product Family
        • ST2035-SAN and ST4035 Appliances
    • H4 Appliances
      • TIBCO LogLogic® LX R2 Appliance Product Family
        • LX1025R2 Appliance
        • LX4025R2 Appliance
      • TIBCO LogLogic® LX R1 Appliance Product Family
        • LX1025R1 Appliance
        • LX4025R1 Appliance
      • TIBCO LogLogic® ST R2 Appliance Product Family
        • ST2025-SANR2 Appliance
        • ST4025R2 Appliance
      • TIBCO LogLogic® ST R1 Appliance Product Family
        • ST2025-SANR1 Appliance
        • ST4025R1 Appliance
• SSD Hardware Field Installation
  • Overview
    • Installing New SSD Drives
    • Re-imaging the Appliance with an SD Card
    • Setting the Boot Order
• Configuration and Upgrade
  • Appliance Software Configuration
    • Setting Up the Appliance by Using a Browser
      • Connecting the Appliance to a Network
      • Logging in to the Appliance
      • Configuring Network Settings
      • Setting the Time Zone and Time
    • Setting up the Appliance by Using the Console
      • Setting up root-level accounts
    • Theme for Rebranding LogLogic LMI
  • Appliance Software Upgrade
    • Upgrade Considerations
    • Preparing to Upgrade the Appliance
    • Upgrading a Standalone Appliance
    • Upgrading in a High Availability Environment
    • Upgrading in an AWS Environment
    • Running the Postupgrade Script
• Administration
  • Overview
    • Appliance Functions
    • TIBCO LogLogic® Product Families
      • LogLogic® LX Appliance Product Family
      • LogLogic® MX Appliance Product Family
      • LogLogic® ST Appliance Product Family
      • LogLogic® EVA
      • Scalable Infrastructure
  • Manage Appliances with Management Station
    • Introduction to Management Stations
      • Management Station Clusters
    • Creating a Management Station Cluster
    • Addition of Appliances to a Management Station Cluster
    • Management of Appliances from a Management Station
      • Performing Tasks on a Remotely Managed Appliance
      • Monitoring all Managed Appliances at Once
      • Tasks using Managed Appliance Log Data
      • Designating a Management Station Appliance as Current
      • Managed Station Status
      • Management Station and Regular Appliance Features
        • Managed Appliance - Administration Tasks
        • Managed Appliance - Configuration Tasks
        • Management Appliance - User Tasks
  • Log Source Management
    • Device Management
      • Collector Domain
      • Viewing Devices
      • Adding or Modifying Log Sources
      • Copying a Device
      • Updating the Device Type
      • Updating Device Name Resolution
      • Removing Devices
    • File Transfer Rules
      • File Transfer Protocols
      • Compressed Files Collection
      • Adding a Log Source for File Transfer
      • File Transfer Rules
        • Adding File Transfer Rules
        • Removing File Transfer Rules
      • File Collection Parallelism - Overview
        • Changing the Number of Concurrent File Collections
      • Configuring Parallel File Processing and Parallel File Forwarding
      • File Collection Merging
    • Device Group Management
      • Adding or Modifying a Device Group
      • Removing Device Groups
  • Device Types Management
    • Viewing the Device Type
    • Adding a New Device Type
    • Editing or Removing Device Types
    • Importing Device Types
    • Exporting Device Types
  • Check Point Log Sources
    • Management of Check Point Log Sources
      • Propagation of LEA Server Definitions
    • Adding an LEA Server
    • Adding a Separate LEA Firewall
    • Adding a Separate LEA Interface
  • Message Signatures
    • Creating Message Signatures
    • Exporting Message Signatures
    • Importing Message Signatures
  • Management of Tag Catalog
    • Adding User-Defined Field Tags
      • Editing or Removing An Existing Field Tag
    • Adding Event Types
      • Editing or Removing An Existing Event Type
  • Column Manager - Overview
    • Accessing the Column Manager
    • Hiding Columns
    • Showing Columns
    • Exporting a Configuration File
    • Importing a Configuration File
    • Generating a Reports Summary
  • Management of PIX/ASA Message Codes
    • Enabling Cisco PIX/ASA Message Codes
    • Mapping Cisco Log Source Names to IP Addresses
  • Management of Port Descriptions
    • Adding Ports
    • Modifying Ports
    • Removing Ports
  • Monitoring Console
    • Enabling the Monitoring Console
    • Configuring a Hawk domain
    • Adding Hawk Certificates to LogLogic LMI
    • Configuration of the Monitoring Console
  • File Transfer History
    • File Transfer: Date and Time Formats
      • Blue Coat ProxySG
      • Cisco ACS
      • Generic W3C
      • Microsoft IAS
      • Microsoft ISA
      • NetApp NetCache
      • Other File Devices
      • RSA ACE Server
      • Squid
  • Forwarding Logs to Other Appliances (Routing)
    • Configuring an Appliance for Message Routing
    • Outbound Routing Rules
      • Adding Destinations to the All Sources Rule
      • Creating a New Outbound Routing Rule
      • Addition of Destinations to the Existing Routing Rule
      • Editing Routing Rules
      • Editing Filters
      • Editing Log Sources
      • Removing Routing Rules or Destinations
      • Removing Destinations
  • Replay of Archived Data
    • How Replay Works
      • Configuration of Replay Environment
      • Data Retention
      • Configuring the Replay Session to Use Authentication
    • Configuration of Appliances to Replay Archived Data
      • Configuring the LogLogic LX Appliance
        • Configuring the LogLogic LX Appliance to Analyze Data
        • Clearing All Log Data from the LogLogic LX Appliance
      • Configuring the LogLogic ST Appliance
        • Setting Up a Management Station Relationship
        • Adding a Replay Rule
        • Modifying a Replay Rule
    • Replay of Archived Data
      • Scheduling a Replay Session
      • Viewing Replay Progress
      • Canceling a Replay Session
  • Backup and Restore
    • Backup and Restore Architecture
      • Backup Methods
      • Backup Interfaces
      • What Is Backed Up?
      • How Backup/Restore Works
      • Differences between Backup on Appliance Product Families
      • Backup Storage
    • Backup and Restore Scenarios
      • Single System Backup
      • Single System Restore
      • High Availability Backup
      • High Availability Restore
        • Restoring in an HA pair
      • Disaster Recovery Backup
      • Disaster Recovery Restore
    • Backup Recommendations
    • Configuring Backup
    • Running Scheduled or Immediate Backups
    • Monitoring Backup Status
      • Backup Errors
    • Restoring an Appliance
  • Data Encryption
  • Purge Stale Devices
  • Viewing Log Files
    • Verifying the SHA Digest on Data Files
  • Archiving of Log Data (LogLogic ST Appliance and LogLogic EVA Only)
    • How Archive Storage Works
      • Storage Volume Watermarks
      • NAS SnapLock Protection
      • External Storage in an HA Pair
      • Enabling a Node ID in the Archive Path
    • Configuring NAS Server Storage
    • Configuring SAN Archive Storage
      • Supported Cable Distances
  • Data Retention Rules
    • Viewing Retention Rule Details
    • Creating a New Retention Rule
    • Modifying Rule Settings
      • Assigning Log Sources to a Data Retention Rule
      • Prioritizing Custom Rules
    • Deleting a Custom Rule
  • Working with Suites
    • Managing Suites
    • Viewing Existing Suites and Reports
    • Creating a Suite
      • Adding Components to a Suite
    • Modifying a Suite
      • Updating Details of a Suite
      • Removing Components from a Suite
      • Deleting a Suite
  • Import or Export Entities Between Appliances
    • Importing Entities using the GUI
      • Selecting a file to import
      • Importing Entities
    • Exporting Entities to XML using the GUI
    • Export and Import Configurations using the CLI
      • Export Commands
      • Import Commands
  • Alert Receivers
    • Adding a New Alert Receiver
    • Modifying an Alert Receiver
    • Removing an Alert Receiver
  • Configuring Advanced Features
    • Configuration of Advanced Alerts
    • Configuration of Scheduled Queries
    • Configuration of the Monitoring Console
    • Configuration of Aggregation Rules
    • Setting up the Geographical Database
  • Enrichment Lists
    • Creating an Enrichment List
    • Editing an Existing Enrichment List
  • Processing Jumbo Messages
  • Report Settings
  • System Settings
    • General Tab
      • Advanced Feature Settings
      • Index Search Settings
      • Syslog Port Settings
      • Secure ULDP Settings
      • Data Privacy Settings
        • Enabling Data Privacy Mode
        • Disabling the Data Privacy Mode
        • Reset Security Key
      • Global Retention Settings: Raw and Indexed Data
      • Scheduled Report Settings
      • SNMP Settings
      • SNMP Trap Sink Settings
      • SNMP Trap Collector
      • System Performance Settings
      • Usage Count
      • Theme for Rebranding LogLogic LMI
      • Custom Logo Upload Settings
      • Build Details
    • Remote Servers Tab
      • Configuring SMTP
      • Setting up a Remote Authentication Server
        • Setting up TACACS or RADIUS
        • Setting up Active Directory
    • Database Table Retention Tab
      • Changing the Database Purging Threshold
    • Setting the Time Zone and Time
    • Customizing the Login Page
    • Password Control Tab
    • Archive Mapping Tab (LogLogic ST Appliance and LogLogic EVA Only)
    • Archive Config Tab
  • User Accounts
    • Managing Users
      • Users Tab
      • User Devices/Privileges Report Tab
      • User Sessions Tab
    • Adding or Modifying a User
      • Defining or Updating Users
      • User Privileges
      • List of User Privileges
      • Associating Users with Log Sources
    • Removing a User
    • Adding or Modifying Users on a Managed Appliance
    • Replicating Users on a Managed Appliance
    • User Roles
    • Adding or Modifying a Role
      • Configuring General Settings for a Role
      • Role Privileges
      • Associating Devices
      • Configuring the Appliance Settings
    • Removing a Role
  • Network Settings
    • Configuring your Network Settings
      • Configuring for a Multi-homed Network
    • Adding or Removing Static Routes
  • Network Access Control
    • Firewall Settings
    • Adding an Input Rule
    • Deleting an Input Rule
  • SSL Certificate Management
    • Creating and Activating LogLogic Signed Certificates
    • Signing the Certificate Using a CA
    • Importing Certificates and Keys
    • Importing a Trusted Certificate
  • Security Settings
    • Cross-site Request Forgery
    • Configuring TLS Syslog
  • Universal Collection Framework Secure Mode Setup
    • Installing LogLogic LMI csr Certificate and rootCA Certificate
  • Failover
    • Failover Architecture
      • Public and Private IP Addresses
      • Failover and External Storage
      • Failover and Backup/Restore
      • Failover Software Layers
      • Failover Membership
      • Real-Time Replication
      • Node Resynchronization
    • Failover Recommendations
      • Failover Performance
      • Failover Limitations
    • Failover Installation and Configuration
      • Hardware Installation
      • Setting up the Failover (New HA Pair)
      • Setting up Failover with a different interface
      • Software Setup (Replacing a Single Node)
      • Setting up the Software to Replace an HA Pair
    • Failover Management
      • Failover Warnings
      • HA Software Upgrade
    • Node Failure and Recovery
      • Node Failure
      • Recovering the Active or Standby Node
      • Double Failure
  • Data Migration Between Appliances
    • When to Migrate Data
    • Data Migration From One Appliance to Another
      • Configuring the Source Appliances
      • Configuring the New Appliance
      • Monitoring the Migration
      • Finishing the Migration
  • Software Update and Diagnostics
    • Update the Appliance Software
      • Using File Update
    • RAID Status
    • System Summary for Diagnostics
      • Process List
      • Network
      • SAN
      • DB Table Status
      • Kernel Ring Buf
      • Restart/Reboot/Shutdown
    • Removal of Appliance Log Data
    • Shredding LogLogic LMI Event Data
    • Health Monitoring Utility
  • Forwarding Data to LogLogic® Unity
    • Creating a New Outbound Routing Rule
    • Adding Destinations to the All Sources Rule
  • IPv6 Support
    • About IPv6
      • IPv6 Address Formats
      • LogLogic Support for IPv6
        • IPv6 Support Matrix
    • Configuring Oracle JDBC Driver for IPv6 Support
  • Command Line Interface (CLI)
    • Connecting to the Appliance
    • exit Command
    • network Command
    • plugin Command
    • raid Command
    • save Command
    • set Command
    • show Command
    • swraid Command
    • system Command
    • unset Command
    • watch Command
  • System Shell Commands
    • llversion Command
    • llshred Command
  • Simple Network Management Protocol (SNMP)
    • Enabling SNMP
    • Management Information Base
    • Sample Object IDs
    • Supported Object IDs
    • List of Available Traps
      • Other Traps
      • Trap Attributes for LogLogic LX Appliances or LogLogic MX Appliances
      • Trap Attributes for a LogLogic ST Appliance
  • Definition of Configuration Rule Files
    • Additional Options in the Configuration Rule File
    • Examples of Configuration Rules
    • Defining a Configuration Rule File
  • Configuration of LogLogic iDRAC
  • LogLogic LMI Ports
    • Port Assignments
    • Examples of LogLogic Port Assignments
• User Guide
  • Overview
    • Appliance Functions
    • TIBCO LogLogic® Product Families
      • LogLogic® LX Appliance Product Family
      • LogLogic® MX Appliance Product Family
      • LogLogic® ST Appliance Product Family
      • LogLogic® EVA
      • Scalable Infrastructure
  • Viewing Dashboards
    • Viewing System Status
    • Viewing Multiple Systems Status (Management Station)
      • Viewing Message Rate
      • Viewing CPU Usage
    • Viewing Log Source Status
      • Log Source Status Descriptions
      • Viewing Unapproved Messages
      • Viewing Recent Messages
  • Search for Collected Log Messages
    • Search Overview
    • Index Search
      • Search Expression Rules
      • Running an Index Search
      • Selection of Specific Log Sources
      • Running a Targeted Index Search
      • Selecting Time Frame for an Index Search
      • The Search Results Tab
        • Viewing search results
        • Configuring Search Results Settings
        • Search Results Options
        • Viewing Index Search Results In Context
        • Search Results: Download Options
        • Saving Search Results Report
      • Trends
        • Viewing trends over time
      • The Search History Tab
        • Saving an Index Search as a Filter
        • Running a Previously Saved Search Expression
      • The Search Filters Tab
        • Viewing or Using a Previously Saved Index Search Filter
      • The Clipboard Tab
        • Adding a New Clipboard
        • Viewing or Editing Clipped Messages
        • Deleting Clipped Messages
      • Using the Tag Picker Interface
    • Regular Expression Search
      • Specifying Parameters for a New Search
      • Generating a previously saved report
      • Saving a Custom Report
      • Using Distributed Regular Expression Search
      • Distributed RegEx Search Results
      • The Pending Searches Tab
        • List of Running Searches
        • List of Pending Searches
      • RegEx Search Results
    • Search Filters
      • Adding a Search Filter
        • Search Filter Options
        • Putting Your Logins Search Filter to Work
        • Additional Parameters to a Pre-Defined Regular Expression Search Filter
        • Creating a Multi-Parameter Pre-Defined Regular Expression Search Filter
        • Modifying a Search Filter
    • All Saved Searches
    • Using and Creating All Index Reports
  • Alerts
    • View and Handle Alerts
      • Filtering and Viewing Alerts
      • Paging Through Alerts
      • Acknowledge, Print, or Remove Alerts
    • Manage Alert Templates
      • Adding a New Alert Template Format
      • Viewing and Modifying an Alert Template
      • Removing an Alert Template
    • Manage Alert Rules
      • Preconfigured System Alerts
      • Adding a New Alert Rule
      • Creating Parsed Data Alerts
      • Modifying or Removing An Alert
  • Real-Time Reports
    • Selecting Sources and Search Filters
    • Selecting Time Frame and Running a Report
    • Operations on the Reports
    • Modifying Report Settings and Time Frame
    • Formats for Saving a Generated Report
    • Rerunning a Saved Report
    • Generating a Report: An Example - Denied Connections Report
      • Rerunning and Editing settings of a previously saved report (Denied Connections)
    • Available Operators
    • Access Control Reports
      • Permission Modification Reports
      • User Access Reports
      • User Authentication Reports
      • User Created/Deleted Reports
      • User Last Activity Reports
      • Windows Events Reports
    • Database Activity Reports
      • All Database Events Reports
      • Database Access Report
      • Database Data Access Report
      • Database Privilege Modifications Report
      • Database System Modifications Report
    • IBM i5/OS Activity Reports
      • All Log Entry Types Reports
      • System Object Access Reports
      • User Access by Connection Reports
      • User Actions Reports
      • User Jobs Reports
    • Threat Management Reports
      • IDS/IPS Activity Reports
      • Threat Activity Reports
      • Configuration Activity Reports
      • Scan Activity Reports
      • Security Summary Reports
      • DB IPS Activity Reports
      • HIPS Activity Reports
    • Mail Activity Reports
      • Exchange 2000/03 SMTP Reports
      • Exchange 2000/03 Activity Reports
      • Exchange 2000/03 Delay Reports
      • Exchange 2000/03 Size Reports
      • Server Activity Reports
      • Exchange 2007/10 Activity Reports
      • Exchange 2007/10 Mail Size Reports
    • Network Activity Reports
      • Accepted Connections Reports
      • Active FW Connections Reports
      • Active VPN Connections Reports
      • Application Distribution Reports
      • Denied Connections Reports
      • FTP Connections Reports
      • VPN Access Reports
      • VPN Sessions Reports
      • VPN Top Lists Reports
      • Web Cache Activity Reports
      • Web Surfing Activity Reports
      • DHCP Activity Report
      • DHCP Granted/Renewed Activity Reports
      • DHCP Denied Activity Report
      • NAT64 Activity Reports
    • Operational Reports
      • All Unparsed Events Reports
      • Firewall Statistics Reports
      • Total Message Count Reports
      • Security Events Reports
      • System Events Reports
      • VPN Events Reports
    • Policy Reports
      • Check Point Policies Reports
      • Network Policies Reports
      • Rules/Policies Reports
      • ECM Policy Reports
    • Enterprise Content Management Reports
      • ECM Activity Reports
      • Content Management Reports
      • Security Settings Reports
      • Expiration and Disposition Reports
    • HP NonStop Audit
      • Configuration Changes Reports
      • Failed and Successful Logins Reports
      • Object Changes Reports
      • HP NonStop Audit Activity Reports
      • User Actions Reports
      • Object Access Report
    • IBM z/OS Activity
      • Resource Access Reports
      • Security Modifications Reports
      • System Access/Configuration Reports
      • Unix System Services Reports
      • Login/Logout Reports
      • Violation Reports
    • Storage Systems Activity Reports
      • Filer Access Reports
    • Flow Activity Reports
      • Application Usage Reports
      • User Browsing Reports
      • Top Users Reports
    • All Saved Reports
  • User Preferences
    • Viewing Your LogApp Account
    • Changing the Login Landing Page
    • Changing the Account Password
  • Advanced Features
    • Advanced Search
      • The Search Field
      • Content Assist
      • Log Source Picker
        • Selecting Log Sources
      • The Time Field
      • Search Results
        • Timeline Charts
        • Columns
        • Types of Columns
        • Data
          • Raw Data Format
          • Table Format
      • Monthly Index
    • Enrichment Lists
      • Creating an Enrichment List
      • Editing an Existing Enrichment List
    • Infrastructure Queries
      • Fetching the Ingested Data
      • Fetching the Advanced Application Pack Schema
      • Correlation Alert SLA Status
      • Aggregation Rule Metrics
    • Queries
      • Scheduled Queries
        • Adding Scheduled Queries
        • Configuring Query Schedules
      • Search Queries
      • Tail Queries
      • Distributed Advanced Search
    • Bloks
      • Filter Bloks
      • Correlation Bloks
        • Using Correlation Bloks in Advanced Search
      • Time Bloks
        • Viewing All Time Bloks
        • Adding a Time Blok
        • Modifying Time Bloks
      • Management of Bloks
        • Viewing All Bloks
        • Adding a Blok
        • Modifying a Blok
        • Deleting a Blok
    • Rules
      • Manage Triggers
      • Aggregation Rules
        • Viewing Aggregation Rules
        • Adding an Aggregation Rule
        • Editing an Aggregation Rule
        • Deleting an Aggregation Rule
        • Enabling or Disabling Aggregation Rules
        • Viewing the Statistics of Aggregation Rule Computations
        • Distributed Aggregation Rules
    • Advanced Alerts
      • Viewing Advanced Alerts
      • Acknowledging Alerts
      • Viewing Alert Details
      • Viewing Event Group Details
    • Advanced Dashboards
      • Manage Advanced Dashboards
      • System Group of Dashboards
      • Types of Widgets
        • Line Widget
        • Bar Widget
        • Bubble Chart Widget
        • Pie Widget
        • Number Widget
        • Gauge Widget
        • Stacked Column Widget
        • Combined Widget
        • Treemap Widget
        • Heat Map Widget
        • DataGrid Widget
        • Range Bar
      • Adding Widgets to an Advanced Dashboard
      • Editing a Widget
      • Deleting a Widget
    • Data Models
      • Viewing the Data Models
      • Adding a Data Model in Graphical Mode
        • Defining a Source Filter
        • Adding a Parsing Rule
          • Parsers and Field Description
        • Editing Parsing Rules
        • Defining the Sequence of Parsing Rules
        • Copying Parsing Rules
        • Deleting Parsing Rules
        • Managing Columns
      • Adding a Data Model in Raw Mode
      • Enabling or Disabling Data Models
      • Editing Data Models
      • Duplicating Data Models
      • Deleting Data Models
    • Monitoring Console
      • Configuring a Hawk domain
  • Universal Lossless Data Protocol Library
    • Connection Parameters
    • ULDP Log Types
    • Sample Tools
    • Setting Up a Secure Connection With ULDP
  • Syslog Host Field Character Sets
    • Exceptions
  • Supported Regular Expression Characters
  • Supported Data Types
  • Search Syntax Reference
    • Event Query Language Reference
      • Common Search Commands
      • USE Statement
      • FILTER Statement
      • Predefined EQL Functions
      • Time Range Expressions
      • COLUMNS Statement
      • GROUP BY Statement
      • SORT BY Statement
      • LIMIT Statement
      • Query Optimization for Better Performance
      • Text Search
      • Search Examples
    • Event Correlation Language Reference
      • Rule Structure
      • Identifier Environment
      • Event Group
        • Expressions
        • Predefined ECL Functions
        • Aggregation Functions
      • Correlation Criteria
      • Correlation Blok (ECL) Examples
  • REST API Reference
    • REST Request Format
    • REST API Endpoint (baseurl)
    • Response Status Codes
    • REST API for Advanced Search
      • Query Creation
      • API to Retrieve the Results
      • API to Delete a Query
      • Sub-Queries
    • REST API for Correlation Rules, Triggers, and Alerts
      • Manage Triggers and Trigger Groups
      • Manage Correlation Rules
      • Retrieve and Acknowledge Alerts
  • Reserved Keywords
• Security Guidelines
  • Introduction
  • Secure Communication Channels
  • Other Recommendations
• Log Source Report Mapping
  • Overview
  • Log Source Report Mapping for Access Control
  • Log Source Report Mapping for Database Activity
  • Log Source Report Mapping for Enterprise Content Management
  • Log Source Report Mapping for HP NonStop Audit
  • Log Source Report Mapping for IBM i5/OS
  • Log Source Report Mapping for IBM z/OS Activity
  • Log Source Report Mapping for Mail Activity
  • Log Source Report Mapping for Network Activity
  • Log Source Report Mapping for Operational
  • Log Source Report Mapping for Policy Reports
  • Log Source Report Mapping for Storage Systems Activity
  • Log Source Report Mapping for Threat Management
  • Log Source Report Mapping for Flow Activity
• Syslog Alert Message Format Reference
  • Overview
    • Format of Syslog Messages
  • SYSLOG HEADER Components
  • LogLogic ID
  • Common Alert Message Attributes
  • Alert-Specific Message Attributes
    • ADAPTIVE_BASELINE_ALERT
    • CISCO_PIX/ASA_MESSAGES_ALERT
    • MESSAGE_VOLUME_ALERT
    • NETWORK_POLICY_ALERT
    • PRE_DEFINED_SEARCH_FILTER_ALERT
    • RATIO_BASED_ALERT
    • SYSTEM_ALERT
      • CPU_TEMPERATURE_ALERT
      • MIGRATION_COMPLETE_ALERT
      • DISK_USAGE_ALERT
      • DROPPED_MESSAGE_ALERT
      • FAILOVER_ALERT
      • NETWORK_CONNECTION_SPEED_ALERT
      • NETWORK_INTERFACE_ALERT
      • RAID_DISK_FAILURE_ALERT
      • RESOURCE_EXHAUSTION_ALERT
      • SYNCHRONIZATION_FAILURE_ALERT
      • TCP_FORWARD_CONNECTION_ALERT
      • TCP_FORWARD_FALLING_BEHIND_ALERT
    • VPN_CONNECTIONS_ALERT
    • VPN_MESSAGES_ALERT
    • VPN_STATISTICS_ALERT
• XML Import/Export Entities Reference
  • Manual Identification of Entities for Import
    • Editing an Exported XML File Manually
    • Description and Usage of XML Tags
      • Common XML Tags
      • Alerts
      • Custom Reports
      • Devices and Device Groups
      • Suites
      • Search Filters
      • Users
      • Alert Templates
    • Example: Devices XML File
• Web Services API Reference
  • Overview of the Web Services API
  • Administration Service API
    • Alert Service Operations
      • Common Request Parameters
      • Alert-Specific Request Parameters
        • Adaptive Baseline Alert
        • Cisco PIX/ASA/FWSM Message Alert
        • Message Volume Alert
        • Network Policy Alert
        • NetworkMonitor Policy Rule
        • Pre-Defined Search Filter Alert
        • Ratio Based Alert
        • System Alert
        • VPN Connection Alert
        • VPN Message Alert
        • VPN Statistics Alert
      • createAlert Operation
      • createAlertRemote Operation
      • readAlert Operation
      • readAlertRemote Operation
      • updateAlert Operation
      • updateAlertRemote Operation
      • deleteAlert Operation
      • deleteAlertRemote Operation
      • getList Operation
      • getListRemote Operation
      • alertResponse Type
      • getAlertHistory Operation
      • acknowledgeAlertHistoryByKey Operation
      • removeAlertHistoryByKey Operation
      • removeAlertHistory Operation
      • alertHistoryResponse Type
    • Device Service Operations
      • Common Request Parameters
      • createDevice Operation
      • createDeviceRemote Operation
      • readDevice Operation
      • readDeviceRemote Operation
      • updateDevice Operation
      • updateDeviceRemote Operation
      • deleteDevice Operation
      • deleteDeviceRemote Operation
      • getList Operation
      • getListRemote Operation
      • deviceResponse Type
    • Device Group Service Operations
      • Common Request Parameters
      • createDeviceGroup Operation
      • createDeviceGroupRemote Operation
      • addDevices Operation
      • addDevicesRemote Operation
      • removeDevices Operation
      • removeDevicesRemote Operation
      • readDeviceGroup Operation
      • readDeviceGroupRemote Operation
      • updateDeviceGroup Operation
      • updateDeviceGroupRemote Operation
      • deleteDeviceGroup Operation
      • deleteDeviceGroupRemote Operation
      • getList Operation
      • getListRemote Operation
      • deviceGroupResponse Type
    • Message Routing Service Operations
      • Common Request Parameters
      • createMsgRouting Operation
      • createMsgRoutingRemote Operation
      • readMsgRouting Operation
      • readMsgRoutingRemote Operation
      • updateMsgRouting Operation
      • updateMsgRoutingRemote Operation
      • deleteMsgRouting Operation
      • deleteMsgRoutingRemote Operation
      • getList Operation
      • getListRemote Operation
      • msgRoutingResponse Type
    • Search Filter Service Operations
      • Common Request Parameters
      • createSearchFilter Operation
      • createSearchFilterRemote Operation
      • readSearchFilter Operation
      • readSearchFilterRemote Operation
      • updateSearchFilter Operation
      • updateSearchFilterRemote Operation
      • deleteSearchFilter Operation
      • deleteSearchFilterRemote Operation
      • getList Operation
      • getListRemote Operation
      • searchFilterResponse Type
    • User Administration Service Operations
      • Common Request Parameters
      • createUser Operation
      • createUserRemote Operation
      • readUser Operation
      • readUserRemote Operation
      • updateUser Operation
      • updateUserRemote Operation
      • deleteUser Operation
      • deleteUserRemote Operation
      • getList Operation
      • getListRemote Operation
      • userResponse Type
    • System Service
      • Get Appliance System Info Operation
  • Report and Search Service
    • Get Report Operation
      • Get Report Request Parameters
      • Specifying Filters for Index Searches
      • Date/Time Formats for getReport
      • Get Report Response Attributes
    • Get Template Report List Operation
    • Get Custom Report List Operation
    • Get Report Meta Info Operation
    • Get Detail Report Meta Info Operation
  • Authentication Service API
    • GetAuthenticationToken Operation
  • Reference Lists
    • Alert Types
    • Message Areas
    • User Administration Privileges
• TIBCO LogLogic® Glossary
• Legal and Third-Party Notices