You can view the details for a log partition and analyze the logs in the partition from the Explore Logs page.

Prerequisites

Verify that you have a premium or a trial subscription for VMware Aria Operations for Logs (SaaS).
  • If you have a trial subscription, you must activate log partitions before using the subscription. To activate partitions, go to Log Management > Log Partitions and click Enable Partitions.
  • If you have a free subscription, you cannot use log partitions.
  • If you have a premium subscription, log partitions are available by default, and you do not have to activate the feature.
For information about subscriptions, see VMware Aria Operations for Logs (SaaS) Subscriptions and Billing.

Procedure

  1. Click the two arrows icon in the upper-left corner of the screen to expand the main menu.
  2. Navigate to Log Management > Log Partitions.
  3. Locate the partition that you want to view in the Indexed Partitions or Non-Indexed Partitions section.
    Tip: You can also search for the partition by entering keywords in the search text box.
  4. Click the partition name to view details such as the partition description, log volume, retention period, routing filter, and so on.
    Under Routing Filters, click Show Logs to view the latest logs ingested into the partition. Click Show Chart to view a graphical representation of the logs in the partition.
  5. To analyze the logs in the partition from the Explore Logs page, in the upper-right corner, click Explore Logs.
    To analyze logs in multiple partitions, open the Explore Logs page and select one or more partitions next to the search text box. You can select multiple indexed partitions, multiple non-indexed partitions, or the recall partition, but not all at the same time.

    For more information, see Search for and Filter Log Events.