Repositories

Part of our Foundational Concepts series:

LogScale organizes data into Repositories (or repos). Each repository has its own set of users, dashboards, saved queries, and parsers.

A repository is a container for data with associated storage. Often you will have one physical repository per project or system. But use-cases vary based on your data volume, user permissions and many other factors.

On a repository you can control retention and create Parsing Data to parse incoming data.

When Ingesting Data it will end up in a repository.

Views

The repository has a close cousin called Views. Views are similar to the views you may know from SQL databases.

Views lets you search across multiple repositories. They also have user management and search filters, making it possible to define which users can see what data. This is how fine-grained access controls are implemented in LogScale

You can search directly in a repository or search using a view. Using a view can give added benefits

  • Joining data from multiple repositories in a single search

  • Restrict results to a subset of a repository's data

  • Redacting sensitive fields

  • Keeping fine-grained control of data retention

To read more about Views, see Views.

The Sandbox Repository

Some accounts have a special private repository called The Sandbox Repository. Unlike other repositories you cannot add additional users or change retention. You can use the sandbox for testing things out or as your main repo if your needs are simple.

Note

You can disable sandbox repositories for your on prem account using the ENABLE_SANDBOXES.

Special System Repositories

LogScale stores it's own metadata, auditing and metric information using the same repository model as that used for user-derived data. This allows the information about LogScale to be queried and accessed using the same query system and for dashboards, alerts and actions to be configured.

The following repositories may exist in your LogScale deployment, with the exact list being dependent on the type of deployment (cloud or self-hosteD) and licensing model in place. System repositories can include any of the following:

For more information on system repositories and their contents, see LogScale System Repository Schema Guide.

Part of our Foundational Concepts series: