Logscape Support

Nathen · Nathen

Hello All, As of 02/11/2015 we've begun the process of migrating all forum activity in house rather than through a third party supplier, the new forum, in a question and answer format, can be found here. Support queries will continue to be answered through both portals for the moment, but please make...

Nathen · Nathen

With the Logscape Cloud Beta Program on the horizon, we're now allowing you to register your interest. Sign up for the mailing list to receive the latest news about the Cloud Program, and to receive your register link as soon as the Beta launches. You can register your interest by filling in your det...

neilson9 · neilson9

Sizing documentation is lacking and currently being worked on. A quick guide is being added to the boot.properties file: # Sizing Guide [Optional = Larger heap config > 4GB] # # 1) - 16GB) # vmargs = -Xms8G -Xmx8G -XX:MaxPermSize=512M -XX:MaxDirectMemorySize=512M # sysprops = -Ddashboar...

ZG · ZG

Hi Logscape Users This thread will have help on all syntax related topics. The Logscape search syntax has been designed to be simple and easy to use. Sometimes it is not clear how to achieve some of the more advanced searches. Use this thread to post questions on search syntax. ZG -- Edited by n...

ZG · ZG

Hi Logscape Users This thread will have help on all syslog related searches. Many of our users use Logscape to analyse syslog data from network devices, VMWare and their applications. Use this thread to post any searches , tips or tricks on how to get more out of your logdata ZG -- Edited by neilson9...

neilson9 · neilson9

Hi, Please help us improve the product. It will take less than 60 seconds and lets us know what you really think! Survey Page Cheers, NA. -- Edited by admin on Friday 20th of June 2014 06:36:46 PM -- Edited by neilson9 on Monday 8th of September 2014 09:11:06 PM

kelv1n · kelv1n

Hi Guys Am I being an idiot? But as far as I can tell there is no "Register" button or link.

neilson9 · neilson9

1. Fix summation problem where only the first even was evaluated2. Further performance improvements on search and ui interaction3. Ability to index any field; discovered or synth (yields faster performance and requires reindexing)4. Improved data types page for debugging and benchmarking5...

kelv1n · kelv1n

Sorry, another idea! So if you've got a sequence of Workspaces that are interlinked, you may have panels that are common to all of them, for example the side-menu on the Agent Audit and Alert Audit pages, so you basically have to create the same panel twice. Instead, you could have eitherA new panel typ...

mark · mark

Hello I'm running the latest version of Logscape (b310) my system is REH 6 with 32GB ram and 16 Cores I have just 4GB of logs, with any search keeps getting stuck at 12% Events: 278,471 (35s) Any idea what it may be or where to look for clues? My boot proprieties is: vmargs=-Xms8G -Xmx8G -Xss256k -XX:...

Vi1 · Vi1

I can not create a team (page Configure->Users->Team, logscape build 1020) . Pressing the save,new,delete,evaluate redirect me the page http://logscapehost:port/play/. Any changes in the built-in teams have the same result.

kelv1n · kelv1n

Hi I've got a Workspace called "Firewall - Security" which has a HTML menu and 2 maps. The HTML menu has 3 links back to the same workspace, just with different Filter options passed to it, the idea is this allows me to filter the traffic by each of our different Firewalls host IP. The HTML opti...

mariuszb · mariuszb

Hi,I am trying to install logscape, but i am getting an error message below, when I run configure.sh script. I don't get to the menu where i would be able to select that i want to install the management /or agent, etcI get the same on error on all Mac Os X, Linux and Windows environments, when using the &quo...

kelv1n · kelv1n

When hovering over top of a panel you get the "Drill Down" link, add a second option called enlarge which basically "floats" the panel and makes it full size browser window.. So you have "Drill Down | Enlarge" Really sorry for spamming these ideas at you. Perhaps o...

kelv1n · kelv1n

I find the Geo Map colours quite hard to read - Could it be possible to customise them? Ideally I'd use some kind of heat map, with Light pale colours for the smallest values.

Vi1 · Vi1

I can not change Provider URL (Users/Directory Services/External Configuration). I set a new IP and port 389, but get an error with default IP 192.168.70.227. Tried to click "apply" and "save", but the result is the same: --- agent.log --- 2015-10-09 13:27:42,986 WARN net...

neilson9 · neilson9

Starting a new thread on next weeks release. - Lower idle cpu consumption in IndexStores/Indexers (Old dirs are throttled according to age) - Overscan error message fix - resulting in improved search performance relating to discovered fields (improves multi-line event) - Fixed event.js popup t...

Vi1 · Vi1

On the search page, I select the one field in the "Discovery fields". I click the icon "Add/Remove from table" near selected field. Then, in the right area of the page changes the form of the table logs. It appears the word "processing ..." on top of the table header. T...

shivkum · shivkum

Im unable to send email from logscape portal. It says connection refused. Im using my gmail id user name and password. I tried using both port 465 and 25 . But it says connection refused.

neilson9 · neilson9

This thread will be updated as each pre-release is made available. Access is via download from logscape.com. If you still would like access to 2.5.2 please let us know.

Istair · Istair

Happy Friday everyone. In a perfect world, all your monitoring tools would be consolidated. Everyone would be able to see everything! Until that day however, it's highly likely that your environment has several different monitoring tools in place for different purposes. One of the more common to...

Istair · Istair

Hey everyone. So Logscape does have the ability to run active/active Managers - which gives you the ability to have a secure Failover. But what if you don't have a spare server you can dedicate to being a Failover. Or what if you want to migrate to a fresh environment... Enter the LogscapeFailoverApp-...

goran_j · goran_j

Hello, we are testing Logscape 3 as an alternative to Splunk and it all works except for Syslog on port 1514. We are running version (Logscape-3.0_b0826-x64) on Windows server. Syslog seems to be running on TCP 1468, when i send data to the server using that port i see a lot of activity in syslogserver....

mark · mark

Hello Sorry I may be asking a silly question but I wrote a regex to capture fields in windows logs and I was hoping to use it to create fields in Logascape but for the life of me I can't where I need to put the regex to generate those fields My regex is (?:\{"([0-9]+?), ([0-9]+?), "(.+?)",...

goran_j · goran_j

I have installed Linux Forwader to a host and without issues. Agent started and reported to Management host fine. Linux server with forwarder however, has two networking adapters one for management and access and other for Storage Network. Forwarder unfortunately registered using IP addres...

kelv1n · kelv1n

Hi Guys We're evaluating Splunk v Logscape, got to say Splunk has some very nice features, but I'm loving Logscape at its far more effective on storage, ease of use and cost! One feature I'd really like to request, is a few improvements to the MapsRather than city "hotspots", allow a pie cha...

kelv1n · kelv1n

H I have multiple devices sending logs to Logscapes built in Syslog server - this includes 4 Firewalls, 2 Email Security Gateways, 2 Web Application Firewalls and a dozen Apache Servers. Whats the best way to ensure these device logs are optimially indexed? I'd like tags for Firewalls, Email Securi...

kelv1n · kelv1n

Hi My firewalls syslogs send through the number of recieved and sent data in bytes. If I sum this, how can I convert it to MB/GB? (Cause see 100MB is far better than 100000000) Cheers

kelv1n · kelv1n

Hi I'm building a pie chart showing the great down of website categories visited by our users. But the graph key / slice titles is being prefixed with the attribute name. So for example, PersonalWebsites and Banking, are showing as category_PersonalWebsites, and category_Banking. Is there anywa...

Ray · Ray

Hi, Has anyone come across the following issue. I have a couple of Agents (logscape-3.0_b0818) running on Centos 6.5 but for some reason Agent is not showing in the Management Dashboard for list of Agents even though on install the Agent can see the Management Server. I made a few changes to get the Ja...

Topic		Started By	Replies	Views	Last Post
	STICKY: Forum Migration in progress. (Preview) Hello All, As of 02/11/2015 we've begun the process of migrating all forum activity in house rather than through a third party supplier, the new forum, in a question and answer format, can be found here. Support queries will continue to be answered through both portals for the moment, but please make...	Nathen	1	1891	Nov 30, 2015 by neilson9
	STICKY: Signup for the Logscape Cloud Beta Program. (Preview) With the Logscape Cloud Beta Program on the horizon, we're now allowing you to register your interest. Sign up for the mailing list to receive the latest news about the Cloud Program, and to receive your register link as soon as the Beta launches. You can register your interest by filling in your det...	Nathen	0	2935	Mar 11, 2015 by Nathen
	STICKY: Sizing Questions (Preview) Sizing documentation is lacking and currently being worked on. A quick guide is being added to the boot.properties file: # Sizing Guide [Optional = Larger heap config > 4GB] # # 1) - 16GB) # vmargs = -Xms8G -Xmx8G -XX:MaxPermSize=512M -XX:MaxDirectMemorySize=512M # sysprops = -Ddashboar...	neilson9	0	3640	Sep 8, 2014 by neilson9
	STICKY: Search Syntax Help (Preview) Hi Logscape Users This thread will have help on all syntax related topics. The Logscape search syntax has been designed to be simple and easy to use. Sometimes it is not clear how to achieve some of the more advanced searches. Use this thread to post questions on search syntax. ZG -- Edited by n...	ZG	2	6849	Sep 8, 2014 by neilson9
	STICKY: Syslog Search Help (Preview) Hi Logscape Users This thread will have help on all syslog related searches. Many of our users use Logscape to analyse syslog data from network devices, VMWare and their applications. Use this thread to post any searches , tips or tricks on how to get more out of your logdata ZG -- Edited by neilson9...	ZG	0	3041	Jun 24, 2014 by ZG
	STICKY: Feedback Poll (Preview) Hi, Please help us improve the product. It will take less than 60 seconds and lets us know what you really think! Survey Page Cheers, NA. -- Edited by admin on Friday 20th of June 2014 06:36:46 PM -- Edited by neilson9 on Monday 8th of September 2014 09:11:06 PM	neilson9	0	3032	Jun 20, 2014 by neilson9
	New support forums.. How to register? (Preview) Hi Guys Am I being an idiot? But as far as I can tell there is no "Register" button or link.	kelv1n	1	1510	Dec 9, 2015 by Nathen
	Logscape 3.03 is now available (01/12/2015) (Preview) 1. Fix summation problem where only the first even was evaluated2. Further performance improvements on search and ui interaction3. Ability to index any field; discovered or synth (yields faster performance and requires reindexing)4. Improved data types page for debugging and benchmarking5...	neilson9	3	1670	Dec 7, 2015 by neilson9
	Idea: Linked Panel or Clone Panel from other workspace (Preview) Sorry, another idea! So if you've got a sequence of Workspaces that are interlinked, you may have panels that are common to all of them, for example the side-menu on the Agent Audit and Alert Audit pages, so you basically have to create the same panel twice. Instead, you could have eitherA new panel typ...	kelv1n	1	1450	Dec 7, 2015 by Istair
	Performance issues, can't find a way to fix them (Preview) Hello I'm running the latest version of Logscape (b310) my system is REH 6 with 32GB ram and 16 Cores I have just 4GB of logs, with any search keeps getting stuck at 12% Events: 278,471 (35s) Any idea what it may be or where to look for clues? My boot proprieties is: vmargs=-Xms8G -Xmx8G -Xss256k -XX:...	mark	6	2337	Dec 2, 2015 by neilson9
	Create a team (build 1020) (Preview) I can not create a team (page Configure->Users->Team, logscape build 1020) . Pressing the save,new,delete,evaluate redirect me the page http://logscapehost:port/play/. Any changes in the built-in teams have the same result.	Vi1	3	1576	Dec 2, 2015 by neilson9
	Workspace linking filters not passing to Maps (Preview) Hi I've got a Workspace called "Firewall - Security" which has a HTML menu and 2 maps. The HTML menu has 3 links back to the same workspace, just with different Filter options passed to it, the idea is this allows me to filter the traffic by each of our different Firewalls host IP. The HTML opti...	kelv1n	7	2298	Dec 2, 2015 by neilson9
	Installing Logscape (Preview) Hi,I am trying to install logscape, but i am getting an error message below, when I run configure.sh script. I don't get to the menu where i would be able to select that i want to install the management /or agent, etcI get the same on error on all Mac Os X, Linux and Windows environments, when using the &quo...	mariuszb	2	1915	Dec 2, 2015 by neilson9
	Idea: Add second option to panel to "enlarge" (Preview) When hovering over top of a panel you get the "Drill Down" link, add a second option called enlarge which basically "floats" the panel and makes it full size browser window.. So you have "Drill Down \| Enlarge" Really sorry for spamming these ideas at you. Perhaps o...	kelv1n	1	1563	Nov 27, 2015 by Istair
	Idea: Map customisation? (Preview) I find the Geo Map colours quite hard to read - Could it be possible to customise them? Ideally I'd use some kind of heat map, with Light pale colours for the smallest values.	kelv1n	2	1460	Nov 26, 2015 by kelv1n
	ldap logscape 3.0 (Preview) I can not change Provider URL (Users/Directory Services/External Configuration). I set a new IP and port 389, but get an error with default IP 192.168.70.227. Tried to click "apply" and "save", but the result is the same: --- agent.log --- 2015-10-09 13:27:42,986 WARN net...	Vi1	4	2830	Nov 4, 2015 by neilson9
	Logscape 3.01 (Preview) Starting a new thread on next weeks release. - Lower idle cpu consumption in IndexStores/Indexers (Old dirs are throttled according to age) - Overscan error message fix - resulting in improved search performance relating to discovered fields (improves multi-line event) - Fixed event.js popup t...	neilson9	1	1331	Oct 30, 2015 by Nathen
	Add/Remove from table (Preview) On the search page, I select the one field in the "Discovery fields". I click the icon "Add/Remove from table" near selected field. Then, in the right area of the page changes the form of the table logs. It appears the word "processing ..." on top of the table header. T...	Vi1	1	1364	Oct 29, 2015 by Istair
	Unable to send test email from logscape portal. Send email SMTP (Preview) Im unable to send email from logscape portal. It says connection refused. Im using my gmail id user name and password. I tried using both port 465 and 25 . But it says connection refused.	shivkum	3	2616	Oct 12, 2015 by neilson9
	Logscape 3.0 Prerelease (Preview) This thread will be updated as each pre-release is made available. Access is via download from logscape.com. If you still would like access to 2.5.2 please let us know.	neilson9	9	3181	Oct 5, 2015 by Nathen
	TivoliApp-1.0 Apps Tivoli Monitoring Integration (Preview) Happy Friday everyone. In a perfect world, all your monitoring tools would be consolidated. Everyone would be able to see everything! Until that day however, it's highly likely that your environment has several different monitoring tools in place for different purposes. One of the more common to...	Istair	0	2349	Oct 2, 2015 by Istair
	LogscapeFailoverApp-1.0 Apps Failover (Preview) Hey everyone. So Logscape does have the ability to run active/active Managers - which gives you the ability to have a secure Failover. But what if you don't have a spare server you can dedicate to being a Failover. Or what if you want to migrate to a fresh environment... Enter the LogscapeFailoverApp-...	Istair	0	2159	Oct 1, 2015 by Istair
	syslog issues on UDP 1514 (Preview) Hello, we are testing Logscape 3 as an alternative to Splunk and it all works except for Syslog on port 1514. We are running version (Logscape-3.0_b0826-x64) on Windows server. Syslog seems to be running on TCP 1468, when i send data to the server using that port i see a lot of activity in syslogserver....	goran_j	3	3428	Sep 27, 2015 by neilson9
	how to use synthetic fields or how to format the logs using regex (Preview) Hello Sorry I may be asking a silly question but I wrote a regex to capture fields in windows logs and I was hoping to use it to create fields in Logascape but for the life of me I can't where I need to put the regex to generate those fields My regex is (?:\{"([0-9]+?), ([0-9]+?), "(.+?)",...	mark	7	2667	Sep 25, 2015 by Istair
	Unix forwarder with multiple IPs (Preview) I have installed Linux Forwader to a host and without issues. Agent started and reported to Management host fine. Linux server with forwarder however, has two networking adapters one for management and access and other for Storage Network. Forwarder unfortunately registered using IP addres...	goran_j	2	2025	Sep 24, 2015 by goran_j
	Feature request - GeoIP Maps and hotspots improvement.. (Preview) Hi Guys We're evaluating Splunk v Logscape, got to say Splunk has some very nice features, but I'm loving Logscape at its far more effective on storage, ease of use and cost! One feature I'd really like to request, is a few improvements to the MapsRather than city "hotspots", allow a pie cha...	kelv1n	2	2097	Sep 23, 2015 by neilson9
	Couple of questions about Syslog and splitting devices.. (Preview) H I have multiple devices sending logs to Logscapes built in Syslog server - this includes 4 Firewalls, 2 Email Security Gateways, 2 Web Application Firewalls and a dozen Apache Servers. Whats the best way to ensure these device logs are optimially indexed? I'd like tags for Firewalls, Email Securi...	kelv1n	2	2042	Sep 21, 2015 by kelv1n
	Summing and changing units - Bytes to MB.. (Preview) Hi My firewalls syslogs send through the number of recieved and sent data in bytes. If I sum this, how can I convert it to MB/GB? (Cause see 100MB is far better than 100000000) Cheers	kelv1n	2	1851	Sep 21, 2015 by kelv1n
	Graph key is being prefixed with field name.. (Preview) Hi I'm building a pie chart showing the great down of website categories visited by our users. But the graph key / slice titles is being prefixed with the attribute name. So for example, PersonalWebsites and Banking, are showing as category_PersonalWebsites, and category_Banking. Is there anywa...	kelv1n	2	1798	Sep 21, 2015 by kelv1n
	Agent on Centos not displaying in Agent List (Preview) Hi, Has anyone come across the following issue. I have a couple of Agents (logscape-3.0_b0818) running on Centos 6.5 but for some reason Agent is not showing in the Management Dashboard for list of Agents even though on install the Agent can see the Management Server. I made a few changes to get the Ja...	Ray	2	1592	Aug 20, 2015 by Nathen
1 2 > Last» \| Page of 2 sorted by