File tree Expand file tree Collapse file tree 1 file changed +7
-3
lines changed
Expand file tree Collapse file tree 1 file changed +7
-3
lines changed Original file line number Diff line number Diff line change 11(rsyslog-usage)=
2- # Store server logs on CrateDB for fast search and aggregations
2+ # Using rsyslog to store server logs in CrateDB
3+
4+ :::{div} sd-text-muted
5+ Store server logs in CrateDB for fast search and aggregations.
6+ :::
37
48## Introduction
59
@@ -97,7 +101,7 @@ CrateDB now stores new rows in `doc.systemevents`, with `syslogtag` matching the
97101Use {ref}` crate-reference:predicates_match ` to find specific error messages:
98102
99103``` sql
100- SELECT devicereportedtime,message
104+ SELECT devicereportedtime, message
101105FROM doc .systemevents
102106WHERE MATCH(message_ft, ' Could not reliably determine' ) USING PHRASE
103107ORDER BY 1 DESC ;
@@ -115,7 +119,7 @@ ORDER BY 1 DESC;
115119Show the top log sources by event count:
116120
117121``` sql
118- SELECT syslogtag,count (* )
122+ SELECT syslogtag, count (* )
119123FROM doc .systemevents
120124GROUP BY 1
121125ORDER BY 2 DESC
You can’t perform that action at this time.
0 commit comments