Configuring_Structured_Log_Streaming

Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

OMi Management Pack for Docker2.10

Administer > Configure Streaming of Docker Container Logs > Docker Log Streaming Policy

Docker Container Log Streaming Policy

The Docker_ContainerlogStreaming policy configures following after deploying the Docker Log Collection aspect:

Configures Docker daemon to send all the logs to syslog server running on the host node.
Configures the host to receive messages from the Docker container log via UDP protocol at port 514.
Configures syslog and Docker daemon to use local 6 facility for the container logs. Messages from local 6 facility is sent to /var/log/Docker. If host is configured to send local 6 facility to other than /var/log/Docker, then the container log is written to the respective file.
The data collected is structured as <SourceHost> <string1> <timestamp> <message>, here <string1> is Docker <container ID>. This log file structure must not be modified. An alert or event is sent if the log file does not exist in the specified location.