Perform powerful searches using keywords and Boolean parameters
Explorer provides a powerful ‘search and explore’ capability for your machine log data. Built on top of Glassbeam’s semiotic parsing language, Explorer allows users to do both full text search and parametric search on hundreds of attributes parsed from the log. Explorer supports an exhaustive search language providing users a powerful search capability. Search queries along with filters can be saved for sharing and re-use.
Explore machine data in both time series and multi-structured formats
Explorer allows you to search both time series logs and multi-structured (non-time series) log data. Beyond searching multi-structured logs either using text or parametric search, explorer also allows you to view logs as raw text or as a table and therefore providing users with powerful interaction capabilities with this data, which includes seeing the differences between prior versions of the data.
Correlate data from multiple sources
Explorer allows you to correlate data from multiple devices and data sources. This allows you to pick an event of interest from any device or data source, and then correlate events around the time of the event across all the other devices or data sources.
Intuitive drag-and-drop interface for quick and easy ad hoc, visual analysis
Workbench exposes thousands of metrics extracted from your machine log through a simple drag and drop analysis interface. Metrics from your log are automatically converted to measures and dimensions for analysis. You can drag and drop your measures and dimensions and use report suggestions to create smart and business-impactful visualization of parsed machine data in seconds. You can also interact with these reports, try different chart types, apply filters, export as an image or PDF and share these reports with others.
Run new calculations on existing data and make one-click forecasts
Workbench allows you to quickly build powerful calculations from your existing data using hundreds of in-built functions. From string operations to math to complex windowing functions can all be done with ease. You can drag and drop reference lines and forecasts, review statistical summaries, do trend analyses, regressions, correlations and more
Create pixel perfect interactive dashboards
Workbench allows you to create Interactive dashboards that help you uncover hidden insights on the fly. You can combine multiple reports into a single dashboard, choose a floating or a fixed layout, allow drill downs, set data from one report to filter another and share these insightful dashboards with all your users.
Centralized store for historical log data stored in original format
Log Vault is a centralized cloud repository for all log files, giving users a single point of access and management for all their machine data. Machine Logs received by Glassbeam is stored in a scalable repository in its original format, so that they can be downloaded for offline analysis
Quick filters to search for a log of interest
You can zero in on the machine log of interest either using the bar graph, which shows the number of 'machine log bundles' received per unit time and drill down to the date and time of interest or you can use the filters on the left. Once multiple filters have been set along with a date range, you can also save that view, so that you can come back to this view in a single click
Deep Integration with other Glassbeam Apps
Log Vault is integrated with all the other Glassbeam apps: Explorer, Section Viewer/Diff and custom dashboards. This allows users to search their machine log of interest from the Log Vault and a single click jump to other applications with this log selected as the filter
Real-time rules evaluation – in the path of parsing
You can setup policy driven rules on both streaming data and batch data. Rules are evaluated in real time and inline, allowing you to set up thousands of rules without any impact on performance. Glassbeam’s Rules Engine provides a range of rules evaluation options. Evaluation of rules can be done on every incoming row of data or rules can be triggered over a time window. For batch processing, along with evaluation of rules per row and over a time window, rules can also be triggered per file and even per bundle (collection of files).
Modern architecture that enables rules to be set up from data across multiple sources
You can setup Rules on data from a single source or create a rule that triggers based on conditions across multiple data sources. Rules & Alerts exposes all the attributes parsed using SPL and organizes them based on the source of the data. You can use our simple drag and drop interface to create rules on any combination of data sources.
Powerful backend that allows for complex rules to be configured
Rules Engine is built using SCALA as the low level domain specific language. The Rules Engine exposes very powerful higher level syntax for creating complex rules through the UI. Rules backend exposes the complete SCALA language as rules DSL, which presented unlimited scope to create any complex rule from the backend.