Extra information is visible in Regular Expression Search results using TIBCO LogLogic LMI

Extra information is visible in Regular Expression Search results using TIBCO LogLogic LMI

book

Article ID: KB0077510

calendar_today

Updated On:

Products Versions
TIBCO LogLogic Log Management Intelligence 4.4

Description

In 4.4, the Regular Expression Seach shows extra information at the beginning of each search result line. The extra information is internal meta data generated by LMI and associated with each log message. The original log has not been modified; this metadata is not included when forwarding the event. In the example below, the original log starts after the 6th colon where the syslog priority value is displayed in bold font:

!B:1207867605.670514/0000:10.5.1.8 :71a194:0011:00ce:<182> Apr 10 22:46:44 localhost COLLECTOR_FC: %LOGLOGIC-6 module:engine_filecollector(15642); file:engine_filecollector.c(main,6245); action:engine_filecollector: heartbeat 60s startup 60s shutdown 10s ;

Issue/Introduction

This article explains what the extra information is that is visible in regular expression search results in LogLogic LMI and how to remove the information.

Resolution

This is a known issue that was addressed in LMI 4.4 HF3.