B Understand the Search Commands

The Search Language for analyzing the logs allows you to specify what action to perform on the search results.

Commands can be either search commands or statistical commands.

Search Commands

Search commands are those commands which further filter the available log entries.

The following table lists the search commands and provides a brief description of each.

Command	Description
addfields	Use this command to generate aggregated data within groups identified by the link command. See Addfields Command in Using Oracle Log Analytics Search.
addinsights	Use this command to view additional insight information in each log record. See Addinsights Command in Using Oracle Log Analytics Search.
bottom	Use this command to display a specific number of results with the lowest aggregated value as determined by the specified field. See Bottom Command in Using Oracle Log Analytics Search.
bucket	Use this command to group the log records into buckets based on the range of values of a field. See Bucket Command in Using Oracle Log Analytics Search.
classify	Use this command to cluster properties of groups identified by the link command. See Classify Command in Using Oracle Log Analytics Search.
cluster	Use this command to group similar log records. See Cluster Command in Using Oracle Log Analytics Search.
clustercompare	Use this command to compare one cluster collection with another, and for viewing the clusters that exist exclusively in the current range versus clusters that exist exclusively in the baseline range. See Clustercompare Command in Using Oracle Log Analytics Search.
clusterdetails	Use this command to return similar log records. See Clusterdetails Command in Using Oracle Log Analytics Search.
clustersplit	Use this command to view the log data within a cluster for specific classify results in the tabular format. See Clustersplit Command in Using Oracle Log Analytics Search.
compare	Use this command to compare properties generated by the link command over the comparison intervals specified. See Compare Command in Using Oracle Log Analytics Search.
createview	Use this command to define a subquery to create a subset of groups identified by the link command. See Createview Command in Using Oracle Log Analytics Search.
distinct	Use this command to remove duplicates from the returned results. See Distinct Command in Using Oracle Log Analytics Search.
eval	Use this command to calculate the value of an expression and display the value in a new field. See Eval Command in Using Oracle Log Analytics Search.
eventstats	Use this command to obtain overall summary statistics, optionally grouped by fields, on properties of groups identified by the link command. Its output will include one field for each aggregation. See Eventstats Command in Using Oracle Log Analytics Search.
fields	Use this command to specify which fields to add or remove from the results. See Fields Command in Using Oracle Log Analytics Search.
fieldsummary	Use this command to return data for the specified fields. See Fieldsummary Command in Using Oracle Log Analytics Search.
head	Use the head command to display the first n number of results. See Head Command in Using Oracle Log Analytics Search.
highlightgroups	Use this command to match strings or search criteria on the properties of the groups identified by the link command, and causes them to be highlighted in the link visualization. See Highlightgroups Command in Using Oracle Log Analytics Search.
highlightrows	Use this command to match a string or a list of strings, and highlight the entire row in the Log UI. See Highlightrows Command in Using Oracle Log Analytics Search.
highlight	Use this command to match a string or a list of strings, and highlight them in the Log UI. See Highlight Command in Using Oracle Log Analytics Search.
link	Use this command to group log records into high level business transactions. See Link Command in Using Oracle Log Analytics Search.
lookup	Use this command to invoke field value lookups. See Lookup Command in Using Oracle Log Analytics Search.
map	Use this command to join a view with the groups identified by the link command to create new properties. See Map Command in Using Oracle Log Analytics Search.
nlp	Use this command to apply natural language processing algorithms to a text field. See NLP Command in Using Oracle Log Analytics Search.
regex	Use this command to filter data according to a specified regular expression. See Regex Command in Using Oracle Log Analytics Search.
rename	Use this command to change the name of a field. See Rename Command in Using Oracle Log Analytics Search.
search	Use this command to retrieve a specific logical expression from the available log data. See Search Command in Using Oracle Log Analytics Search.
searchLookup	Use this command to retrieve contents from a lookup table. See SearchLookup Command in Using Oracle Log Analytics Search.
sort	Use this command to sort logs according to specified fields. See Sort Command in Using Oracle Log Analytics Search.
tail	Use this command to display the last n number of results. See Tail Command in Using Oracle Log Analytics Search.
timecluster	Use this command to group the time-series charts together based on how similar they are to one another. See Timecluster Command in Using Oracle Log Analytics Search.
top	Use this command to display a specified number of results with the highest aggregated value as determined by the specified field. See Top Command in Using Oracle Log Analytics Search.
where	Use this command to calculate the value of an expression to be true or false. See Where Command in Using Oracle Log Analytics Search.

Statistical Commands

Statistical commands perform statistical operations on the search results.

The following table lists the supported statistical commands, and provides a short description for each.

Commands	Description
distinct	Use this command to remove duplicate entries from the search results. See Distinct Command in Using Oracle Log Analytics Search.
stats	Use this command to provide summary statistics for the search results, optionally grouped by a specified field. See Stats Command in Using Oracle Log Analytics Search.
timestats	Use this command to generate data for displaying statistical trends over time, optionally grouped by a specified field. See Timestats Command in Using Oracle Log Analytics Search.