Planning for Your Monitoring Policy Template
Before running the template creaction wizard, you must review and collect the information the is required during the policy creation.
Use the following checklist as preliminary steps to consider before creating the template:
Determine the method for defining the template columns
When you create the template, you can define the log columns by using one of the following methods in the wizard:
- User Defined, to manually specify the template columns.
- Delimited, to automatically discover the columns by uploading the log file.
Based on the log structure, determine which of the methods simplify your data entry. For example, if the log has 10 columns, you might want to use the Delimited method.
Determine the template properties
The template properties define the structure of the log. You must define the following properties:
- Parsing criteria:
- Columns in the log file (see the next checklist for more information on column properties).
- Delimiting characters that separate each column.
- Number of lines in the log header.
- Extension of the log file to be monitored. All extensions are supported (such as .txt or .log).
- If you decided to automatically discover the columns, determine the lines that you want to read from the log.
To see examples on how to gather the properties for a template, review the template samples described in Examples for Monitoring Policy Templates.
Determine the column properties
To define columns in the template, you need to gather the following details for each of the columns in the log:
- Determine the data type and format of the column. For example, the data type could be a date using the MM-DD-YYYY format.
- Decide if you want to index the column, which allows you to search the log data in the Log Monitoring dashboard.
If you choose to index the column, determine if you want to display the column as a facet (search filter) in the dashboard.