Querying Log Files for Sessions

Use the following procedure to search log files for specific sessions. For other options of the Log File Analyzer (LFA) query command, see Creating and Saving LFA Queries.

To query for events associated with a particular session

• Enter:

  query query_name where session = session_ID
  

  where:

  • query_name is the query command output stored in memory under this name.

  • session_ID is the session ID of interest in log files.

An example of this query command is as follows:

query sesqry where session = !1.15bc.c425.3f302b17

This command queries log files for events associated with session ID !1.15bc.c425.3f302b17 and saves the output to memory under the name sesqry.