Tagging Overview

Logscape provides a way to categorise and identify your data sources using tags. A tag is name or an alias for your data source and is represented by the system field_tag.

Tags are a versatile way of categorising your data. A Data Source can be aliases with multiple tags. This allows you to add meta information to a data source. For example a data source may point to the applications logs belonging to a database server in your UAT environment. This datasource may be tagged db-logs,uat, representing the data being collected and the environment it belongs to.

Using tags in Searches.

You can filter your search based on where your data is coming from using the_tag system field in your search The search below will show all the different files for a specific tag.

		| _tag.equals(java) _filename.count() 

Auto-Tagging

Data in Logscape can be automatically tagged upon ingestion by placing a file inside the source folder for that data, which has a name pre and post pended by an underscore, the name of this file will automatically be applied to your data as a tag, i.e a file located in

C:/Program Files/ExampleProgram/Logs/_example_/output.log

Would automatically be tagged as 'example'

Using tags in Data Groups

Tags can also be used in Data Groups to give and remove access to data. User access to the data provided by tags is managed on the Datagroup page