Management

Available in Classic and VPC

In Management, it describes how to manage projects and groups integrated with project and group menus in the console, set notifications, and manage saved searches (queries).

Project management

You can check the information of the projects integrated with project menus in the console and manage log fields.

Project page

The basics of the Management > Project menu in Web App are as follows:

View project details

To check project details in Web App's Management > Project menu, follow these steps:

1. Access Web App. (Refer to Access Web App)
2. Click Management > Project.
3. Click the name of the project to check from the list (widget or chart).
   • You can search projects using the searching or filtering feature.
4. Check project's details.
   • By clicking the [Search] button on the top right, you can run a log search for the project. (Refer to Search logs)
   • Basic information: displays information of the project created in the console
   • Daily log usage: displays the current status based on the Maximum daily collectible log capacity set in the console
   • Request status in the last 30 days: displays the number of searches and search range in charts based on the Log retention period set in the console
   • Log sampling: display current status based on the Log sampling set in the console
   • Log notification: currently under preparation
   • Usage in the last 30 days: displays log usage in charts based on the Log retention period set in the console
   • Schema: you can check, add, and manage schemas used for transferring logs or searching (Refer to Add and manage schemas)

Add and manage schemas

To add, edit, and delete schemas of the project in Web App's Management > Project menu, follow these steps:

1. Access Web App. (Refer to Access Web App)
2. Click Management > Project.
3. Click the name of the project from the list (widget or chart).
   • You can search projects using the searching or filtering feature.
4. In the Schema field, click [Add schema].
5. Enter or select the field information in the field addition popup window and click [Save].
   • Field name: enter the name of the field to create
   • Data type: select the type of data
   • Data format: displays when the data type is selected as date
   • The field is created and displayed on the list.
6. If necessary, edit or delete the fields you added.
   • The basic field of the project cannot be edited or deleted.
   • To edit the added field, click , edit the field, and click [Save].
   • To delete the added field, click and [OK].
   • You can search fields by names in the search bar on the schema list.

Manage groups

You can check the information of groups integrated with group menus in the console.

Group page

The basics of the Management > Group menu in Web App are as follows:

View group details

To check group details in Web App's Management > Group menu, follow these steps:

1. Access Web App. (Refer to Access Web App)
2. Click Management > Group.
3. Click the name of the group to check from the list (widget or chart).
   • You can search groups using the searching or filtering feature.
4. Check group's details.
   • Project name: displays the name of the project added to the group in the console
     • Click the project name to go to the project page in Web App. (Refer to Manage projects)
   • Action: displays action details that can be done with the project
     • By clicking , you can run a log search for the project. (Refer to Search logs)
   • By clicking the [Search] button on the top right, you can run a log search for all projects in the group. (Refer to Search logs)

Manage notifications

With the notification feature, you can set to send notifications in a method that the user sets when the number of logs satisfying certain Lucene queries is found to exceed a certain threshold.

Notification page

The basics of the Management > Notification menu in Web App are as follows:

View notification details

To check notification details in Web App's Management > Notification menu, follow these steps:

1. Access Web App. (Refer to Access Web App)
2. Click Management > Notification.
3. Click the name of the notification to check details from the list (widget or chart).
   • You can search projects using the searching or filtering feature.
   • For more information on notification details, see Add notification.
   • Basic information: displays information of the notification set when creating the notification
   • Condition: displays conditions and description of the notification set when creating the notification
   • Detail Setting: detailed setting options set when creating the notification
   • Session: displays data and the status of the session
   • History: displays the task history of the notification

Add notification

To add a notification in Web App's Management > Notification menu, follow these steps:

1. Access Web App. (Refer to Access Web App)
2. Click Management > Notification.
3. Click the [Add notification] button.
4. Enter the information of the notification to add in the notification addition popup window.
   • Basic information
     • Name: enter the name of the notification to create
     • Urgency: select the urgency level
     • Project: select the project for the notification
     • Query: enter the query to run the notification
   • Condition
     • Threshold: enter the threshold(number of logs) for which the anomaly is detected in Range and Every condition set in the Window
       • >=: select when the number of logs exceeds the entered number of logs
       • <=: select when the number of logs is below the entered number of logs
       • To change the threshold depending on time and day, select and activate Would you like to have the threshold changed by time and day? and then set the Variable threshold item, which is displayed additionally.
     • Window: enter the Range and Every conditions
     • Final notification settings: displays the description of the set Threshold and Window
   • Detailed settings (When clicking View more of detailed settings)
     • Field to group: enter the field to group
       • Grouping is only supported in the >= condition.
     • Callback: set callback conditions
       • Click the [+] button to set in the callback addition popup window.
       • Status: select whether to apply a callback
       • URL: enter the callback URL to call when an event occurs
       • Headers: enter the header name and value information to be delivered to the callback URL when an event occurs
       • Template: set up Template according to the following "Template setup". It is recommended to copy and paste the following values.
         • If an event occurs, enter the message to be transmitted through URL in JSON type.
         • However, to transfer event information, use the variables supported in ELSA2.0. (Refer to Template variable table)
5. Click the [Save] button.
   • The notification is created and displayed on the list.

※ Template setup:
It is recommended to copy and paste the following Template installation values.

  {
    "summary": "{{summary}}",
    "startTime": "{{window.start}}",
    "statusEmoji": "{{status.emoji}}",
    "statusColor": "{{status.color}}",
    "statues": "{{status}}",
    "alertName": "{{name}}",
    "alertLevel": "{{level}}",
    "projectName": "{{project.name}}",
    "duration": "{{session.duration.pretty}}",
    "condition": "{{threshold.pretty.range}}",
    "observedLogs": "{{window.logs}}",
    "windowUrl": "{{window.url}}",
    "alertDetailUrl": "{{url}}",
    "descriptionHtmlEscaped": "{{description.html_escaped}}"
  }

Template variable list

The following shows the template variables used in the callback feature.

Specification-related variables of the notification

Status-related variables of the notification

The variable related to the log search results of the current events

Other variables

Edit notification

To edit a notification in Web App's Management > Notification menu, follow these steps:

1. Access Web App. (Refer to Access Web App)
2. Click Management > Notification.
3. Click the name of the notification to check from the list (widget or chart).
   • You can search projects using the searching or filtering feature.
4. Click the [Edit] button.
5. Edit basic Information, conditions, and detailed setting options.
   • For more information, see Add notification.
6. Click the [Save] button.

Delete notification

To delete a notification in Web App's Management > Notification menu, follow these steps:

1. Access Web App. (Refer to Access Web App)
2. Click Management > Notification.
3. Click the name of the notification to check from the list (widget or chart).
   • You can search projects using the searching or filtering feature.
4. Click the [Delete] button.
5. From the delete confirming popup window, click [OK].
   • The notification is deleted and disappeared from the list.

Manage saved search

You can check and manage (add, edit, or delete) the saved queries in Management > Saved search in Web App.

Saved search page

The basics of the Management > Saved search menu in Web App are as follows.

Add search

To add a search in Web App's Management > Saved search menu, follow these steps:

1. Access Web App. (Refer to Access Web App)
2. Click Management >Saved search.
3. Click the [Add search] button.
4. Enter the information of the search to add in the search addition popup window.
   • Data source: search and select the project name or group name
     • When there are recently searched projects or groups, click the file, and those projects or groups are displayed automatically when a click on field is performed.
   • Title: enter the search title to add
   • Query: enter the query syntax to search
   • Description: enter the description of the search
5. Click the [Save] button.
   • The search is created and displayed on the list.

Edit search

To edit the saved search in Web App's Management > Saved search menu, follow these steps:

1. Access Web App. (Refer to Access Web App)
2. Click Management >Saved search.
3. From the list, click of the search to edit.
4. Edit the search information.
   • For more information, see Add search.
5. Click the [Save] button.

Delete search

To delete the saved search in Web App's Management > Saved search menu, follow these steps:

1. Access Web App. (Refer to Access Web App)
2. Click Management >Saved search.
3. Select the search to delete on the list and click [Delete].
   • Or, click of each search item.
4. From the delete confirming popup window, click [OK].
   • The search is deleted and disappeared from the list.

Run search

To search logs with the saved search in Web App's Management > Saved search menu, follow these steps:

1. Access Web App. (Refer to Access Web App)
2. Click Management >Saved search.
3. From the list, click of the search to search logs with.
   • Go to the log search page. For more information about log search, see Search.