Features
Effortless Navigation
Logfalcon enables straightforward, fast and effective navigation of log files.
Log files are often spread out in the enterprise, split in multiple parts with different formats and can become unmanageably large. This makes the navigation and real-time viewing of these files time-consuming and error-prone. LogFalcon solves each one of these problems and further adds many usability features enabling you to manage and analyse log files easily and effectively.
• Supports almost any type of text log files
• Access log files in the Windows file system as well as on Unix(NFS)
• Combine various log files at once in a consistently-formatted time-sorted screen to get a real sense of what the system is doing at any given point in time
• Send entries of interest to the “Investigation Pad”, or analyse them to other screens of LogFalcon such as the charting screen
Smart Searching
LogFalcon allows you to perform incredibly powerful searching with ease. Starting with basic searches, a simple and familiar web-style search interface is available for textual searches.
Going far beyond traditional “text searching”, LogFalcon understands your data in a comprehensive manner. Perform searches such as “Show orders whose value is greater than 100”, or “Show transactions that exceeded 100msec” just based on your existing log data. Define simple or complex object definitions in minutes, and use them to perform any type of search based on any criteria you find important.
Once you have found your results, combine them with other results or send some of them to the “investigation-pad” where it can be analysed along with other entries.
Then save the advanced searches which are of use to you, and reuse them by simply filling in the blanks.
LogFalcon takes log searching to a whole new level.
Powerful Charting
Using charts has always been a powerful method to analyse large amounts of data, and with LogFalcon it is now possible to produce more types of charting based on a lot more of the data in your logs.
Create object definitions in minutes, and use these objects to generate various types of charts such as:
• Multi time-plot
• Bar and Multi-Bar Charts
• Pie Charts
• X-Y Scatter Graph
Furthermore, all charting is real-time. A large amount of failed login authentications result in a spike in a time plot as they happen. The bar charts showing sales per product move as orders come in. Memory, CPU and Utilisation percentages can be shown in a single real-time time plot.
Place these charts in a dashboard along with other real-time elements such as reports and alert screens to obtain a full overview of your system.
Customisable Dashboards
Create dashboards that show you the information that is crucial rather than just a few basic technical indicators. Combine technical and business level information available in the logs to achieve an instant overview in real-time.
LogFalcon dashboards combine the power of the various screens of the application into a single, customisable screen. More specifically, you can combine a number of the following screens into a real-time dashboard:
• Charts and Graphs
• Reports
• Alerts
• Searches
Beyond displaying the information, LogFalcon provides drill-down on the dashboard. If you notice a spike in the number of authentication alerts, you can go straight to the underlying log entries to see the cause.
Versatile Reporting
Leverage the valuable information hidden in log files to produced advanced reports. Define objects in minutes, and use them to produce all types of reporting with various types of fields. Easy-to-use reporting options include:
• Functions (e.g. sum, average, count, etc.)
• Formatting (e.g. percentages, case-changes, etc.)
• Grouping by any object field
• Sorting and limiting (e.g. “the top-10 slowest transactions”).
For example, which IP addresses have had the most unsuccessful log-in attempts, and how many? How much of each product have we sold so far this day? How many orders are currently in New, Suspended or Completed state? All this can be answered through the use of the real-time LogFalcon Reporting capabilities.
Intelligent Alerting
Detect errors and abnormal events through intelligent alerting. Get alerts on precisely the events that you find important, no more and no less. Define objects and minutes, and use them to easily create alerts based on complex situations.
For example, “Alert me when an order worth more than 1000 has been rejected”. Or “alert me when the same IP address has tried to login more than 10 times”.
Manage these alerts through simple severity levels (Green, Yellow and Red), and group them according to various criteria such as the server or environment they relate to. Place an alerting screen inside the dashboard so that you know at all times when events occur.