Filtering LFA Queries

Use the show command to further refine the output of saved queries. For information about querying log files and creating saved queries, see Creating and Saving LFA Queries.

For information about displaying a saved query or multiple saved queries, see Displaying Saved Query Output.

To filter saved query information

  • Enter:

    show query_name where_clause
    

    where:

    • query_name is the query command output stored in memory under this name.

    • where_clause is the WHERE clause used to filter display results using key words.

For a list of key words available for use with the Log File Analyzer (LFA), see Listing Query Command Key Words. The syntax of where clauses used with the show command are similar to those used with the query commands. Review Creating and Saving LFA Queries for more information.

Use multiple where clause conditions and the logical operators AND and OR to further filter an individual or multiple saved queries. For examples of these types of commands, see Examples of Filtered Saved Queries.

To save filtered output from the show command, save the results to a text file. For description of this task, see Saving Log File Analyzer Output to Text Files. Filtered output from the show command cannot be saved in memory.