Falcon LogScale Documentation

You register for a free account using LogScale Community Edition.

To get started with a full account, go to Getting Started with LogScale Cloud and request an account.

Figure 431. Opening Console

Once you've logged into LogScale Cloud, it will look like the screenshot in Figure 1.

Let's look at a few things on that screen:

Figure 432. Help Menu

If you're ready to start the interactive tutorial, click on one of the links on the page. Incidentally, you can always find a link to the interactive tutorial in the Help pull-down menu (see Figure 2). You can also find links back to the LogScale Library where you'll find this Getting Started guide.

Figure 433. Layout of the Interactive Tutorial

When you first open the interactive tutorial, the window will appear similar to the screenshot in Figure 3. There are a few things worth noticing before starting the tutorial:

Let's follow the tutorial and try executing a query.

To follow the tutorial, use the tutorial navigation in the right panel. The panel on the right will display instructions for you to read and follow. It will tell you what to type and where, as well as explain what you're doing and provide links to the documentation.

Figure 434. Starting the Interactive Tutorial

To start the interactive tutorial, just click on the large dark purple button in the right margin where it says, Next (see Figure 3).

The first step is try searching the Sandbox, as shown in Figure 4.

There is a pre-filled input box containing the text example.com. To search for all log entries containing that text, you would type it in the input box near the top left of the screen (see Figure 5 below). For the interactive tutorial, you could copy and paste it in that box, or you could just click on the right arrow next to the input box it'll paste it into the input box for you.

When you run a search, you'll notice after a short amount of time that the log entries in the main panel will change to only those containing the search term. These will be entries that contain example.com. If you'd like, you can go beyond the example suggested. You could change the search term to something else, like Chrome to see all entries in which the server's web site was accessed with the Google Chrome browser, or maybe to Safari for the Macintosh web browser. Try whatever comes to mind, and don't worry about causing problems: you cannot change the data or ruin the tutorial by doing this.

Figure 435. Searching the Sandbox

Whether using the Sandbox or some other repository, you can search on almost anything you want. However, to be assured of some results, click on one of the Known Fields in the left margin to see what's available. For instance, you might click on the field, userid. That will show in the main panel the user identifiers in the repository data. You would then take one of those names (e.g., peter) and type it in the search input box and hit Enter. The results in the main panel will then show all of the entries that contain the user name you entered.

All of this playing will cause the interactive tutorial to take longer than predicted, but it's alright. It'll help you to learn LogScale software, and to be comfortable with the interface. When you've had enough, though, click on the dark purple button at the bottom of the right margin that's labeled, Continue. This will take you to many more instructions on how to search a repository.

Figure 436. Other Elements in the Tutorial

At this point you should be able to follow the interactive tutorial yourself. There are just a few more things worth mentioning, things you might not notice as you're going through the tutorial.

Important items that you need to look at while following the tutorial will be highlighted in Green.

Another thing: when you're about to enter text in the search field, if you can't remember a function, try hitting Alt+Enter on Macintosh machines and Ctrl+Space on Windows or Linux computers. This will offer you some assistance.

Figure 437. Navigation

Last is the tutorial navigation (see Figure 7). At the bottom of the right margin, you'll see the Back and Next to be able to go back to a previous page or forward to another page, one page at a time. You can also click on where it says, Tutorial Outline. That will reveal the list of pages in the interactive tutorial. This will give you a sense of how far along you are in the tutorial. You can also use this to navigate. You would click on whichever page you want to view.

We recommend that you go through the pages of the interactive tutorial in order. However, you may want to jump back to a previous page to remember something that was covered already, and then jump back to wherever you were. Also, if you have to stop the tutorial and want to return to it later, this navigation will help you to go back to where you left off.

The interactive tutorial is very useful in taking you through the process of first trying LogScale. However, you'll learn more from creating your own repository and using your own data. After you've finished the interactive tutorial and you're ready to learn more, read the LogScale with Your Data tutorial.