Showing 20 ideas for tag "analytics"

Feature Requests

Enrich log records

We would like to be able to enrich log records with info from an external sources (add custom tags for incoming/existing logs based on a query to an external service) like vROPS does.


Use cases:

a. Query GeoIP Web Service for IP’s location

b. Query CMDB via HTTP/LDAP for additional information (e.g. customer name, related services, server role, environment ….)

Feature Requests

Add condition to query

We would like to add some conditions on the query. Today we have our monitoring which is working with codes as "200" to "399". So ours probes are switching codes all time, sometimes with a very little time between changes.

The aim of this feature request is to provide a way to display events according to some conditions like :
- if my field A is containing "200"
- if in the following 30 minutes, the field A is switching... more »

Feature Requests

Enable parser selection and configuration on server or forwarder

Use case:

1) There is no way to use an agent and logs are not getting properly parsed on the server

2) Agent is installed, but administrator prefer not to risk any additional load on the source system caused by agent-side parsing


Solution: configure parsing (analogue to agent-side parsing) on the server or dedicated forwarder

Feature Requests

Compare extract fields on same access.

We need to have a feature where we can compare the extract fields on the same axis. Here is the reason why we need this feature especially when analyse GC logs.

Use Case:
Say i am using Log Insight to analyse the GC logs. The GC logs will have Initial Heap Size and the Final Heap Size. If we can have a feature where user can decide the axis to compare the extract fields, this will help us interpret the data better.... more »

Feature Requests

More advanced query DSL

I want to be able to make more advanced (PIQL?) queries to LI. For example:

1. Apply functions (i.e. regex, arithmetic, logic, type conversion) on one or more existing fields, i.e.
a. sum: fieldA + fieldB
b. fieldA OR fieldB
c. REGEX(fieldA, pattern)
d. CAST('10.2' AS DECIMAL)

2. Create custom fields:
a. DATE() AS today
b. expressionA - expressionB... more »

Feature Requests

Allow Favorite Queries to use Dynamic Time Ranges

When you save a query to your favorite queries, it saves all the search and graphic conditions in addition to the EXACT time range was used. Even if you used the LAST 24 hours for example, that gets translated to 5am-5am for example when you pull it up from favorite queries. It would be great if there was an option to let the query to be set to "last 24 hours" or "last 6 hours" and that time is dynamic based on when it's... more »

Feature Requests

Application Autodiscovery

When Content packs are added post agent deployment on large estates, each agent's configuration requires updating to add the relevant section to the liagent.ini or the liagent-effective.ini. The recommended route is via the UI, but when the estate is large and there are many forwarders, then it becomes quite a task to determine which content packs are relevant to each of the target agents.

It would be fantastic (and... more »

Feature Requests

Math factor - for values

I was working on making a presentation of different values, and it struck me that it was exposing a lot of different values. One Place i got a Count, and another Place i had MB while on the NeXT one there was bytes. In making comparative Dashboards there should be the ability to use a Math factor for either multiplying or dividing the number you have, so you can alter the exposed value to the desired resultset.