Drag and Drop Matching Questions

Compute statistics on search results

Evaluate expression and create new fields

Extract fields using regular expressions

Group related events into transactions

Create time-based chart of statistics

Filtering command

Filtering command

Reporting command

Reporting command

Reporting command

Optimizes for speed, minimal fields and events

Adjusts automatically based on search complexity

Returns all fields and events for maximum detail

Define how to extract fields from raw data

A search that is persisted and can be scheduled

Saved search with visualization or statistics

Saved search that triggers actions on conditions

Collection of panels with saved searches or reports

Tails a file or directory for new data

Receives syslog data via UDP or TCP

Runs a script to collect data

Receives data via HTTP or HTTPS

Collects Windows Event Log data

Default index for all data unless otherwise specified

Stores pre-computed results for faster searches

Optimized for numeric metric data

Stores data model acceleration data

Full system access including settings and users

Create and share knowledge objects and run searches

Run searches and create personal knowledge objects

Ability to delete events from indexes

Full-featured license for production use

Limited to 500 MB/day, no authentication or distributed search

Free license for forwarders only

Full features for a limited time period

Processes incoming data and stores it in indexes

Handles search requests and distributes to indexers

Sends data to indexers or other forwarders

Manages configuration of forwarders

Manages license usage across the deployment

Stores lookup data in a CSV file

Stores lookup data in a key-value store collection

Runs an external script to perform lookup

Matches coordinates to geographic regions