Filtering log records in log view

Filtering in the Log and Trace Analyzer is based on the Common Base Event properties. You can create filters to examine specific data from the application log files. The Log and Trace Analyzer provides two methods of filtering log records. With regular filtering, you can specify which Common Base Event properties to display and the order in which they are displayed in the Log view. With advanced filtering, you can create filters based on values that you specify for the Common Base Event properties.

Filtering

In Log view, click the Filter Properties button . The Filter Properties dialog box opens.

list of filter properties, some checked and some not

To control which properties should appear in the Properties pane, select or clear the properties to be displayed. To control their order, use the Up and Down buttons.
To filter by severity, select or clear the severity of error log records. Severity is indicated like this:

: High severity
: Medium severity
: Low severity

Click OK. The list of records is refreshed.

Advanced filtering

To create an advanced filter, click the Advanced Filter Properties button

in the Log view. The Advanced Filter Properties dialog box opens.

Adding a filter
1. To add a new filter, click Add. The Add Filter Property dialog box opens.
2. Select an attribute and operator. Type a value for the attribute. For example, you want to filter the log records by the creationTime and msg attribute. The filter would be created as follows:
  
  Tip: Value field of the filter can be a string pattern with * used as wildcard.
3. Click OK. The new property filter shows up in the Advanced Filter Property dialog box.
4. Click OK. The filter is applied to the Log view.
  Using above example, the Log View will only show the log records that satisfy the criteria specified in the filter.
Editing a filter
1. To edit a filter, select the filter from the list and click Edit. The Edit Filter Property dialog box opens.
2. Update the attribute, operator or value.
3. Click OK. The modified property filter is updated in the Advanced Filter Property dialog box.
4. Click OK. The filter is applied to the Log view.
Deleting a filter
1. To delete a filter, select it, then click Remove.
2. Click OK. The list of records is refreshed.
3. Click OK. The Log view is refreshed.