InRange Process Plugin

Release Details

Bug Fix

The following issue has been resolved:

• Enriched fields were not highlighted in the search results.

Usage Information

Syntax: 

| process in_range(endpoint1, endpoint2, field, result, inclusion)

where, 

• endpoint1 and endpoint2 are the endpoint fields for the range, 
• field is the field name to check whether its value falls within a given range, 
• result is the user-provided field to assign the result: TRUE or FALSE,
• inclusion is the parameter to specify whether the range is inclusive or exclusive of given endpoint values. If this parameter is TRUE, the endpoints will be included for the query, and if it is FALSE, the endpoints will be excluded. 

For Example:

The "| process in_range(datasize, sig_id, duration, Result, True)" query checks if the duration's value lies in the range of sig_id and datasize, inclusive of the endpoints, and assigns the result (TRUE or FALSE) to the Result field. 

Sample Log

Installation

Follow these steps to install the InRange Process Plugin v3.1.0:

1. Download the InRange Plugin package provided in the Download section above.
2. Install the application by importing the pak file to LogPoint under Settings >> System >> Applications.