Creating a system log filter

System log filters are provided and are listed in the Manage System Logs dashboard. If the provided filters do not meet your requirements, you can create additional filters. All log filters are available as predefined filters in the View System Logs dashboard.
  1. Select Dashboards > Logs > Manage System Logs.
  2. Click + Add and specify this information:
    Name
    Specify a name for the log filter.
    Description
    Optionally, specify a description of the log filter.
    Farm Component
    Select the component for which to log events. To log against only selected instances, click the browse button in the Instances field.
    Minimum Level
    Select the lowest level at which to log events. Events are logged at the selected level and all levels above it in the list. For example, select Debug, to log at all levels. Or select Error to log at the Error and Critical levels.
    Note: By contrast, in the log viewer, the Levels field is a filter which enables you to view logs at, for example, only the debug level or only at the error level.
    Caution: 
    Setting the minimum level to Debug can produce a very large amount of log entries. Correspondingly, the log database might become slow or even run out of disk space. The recommendation is to use the Debug level with considerable care.
    Users
    Lifetime
    Specify the number of hours and minutes for which to log events. Optionally, specify a user or comma-separated list of users for which to log events.
    Note: The Forever option, which applies to the system log filters, is not available for filters that you create.
    Event IDs
    Optionally, specify one or more event IDs to log. Separate multiple IDs with a comma. To specify a range of IDs, use a hyphen. For example, 2004-2008. Leave the field blank to log all event IDs.
    Service Components
    Optionally specify the unique IDs of service components for which to log events. Service components are classes within a service.
    Component IDs
    Optionally, specify the component IDs of the component instances for which to log events. Some components have multiple instances within one worker or manager. The Component ID identifies the instance.
  3. Save or discard your changes.
  4. After saving a filter, you can specify its lifetime. Specify the lifetime in hours and minutes
  5. Click Start. Optionally, specify a user or to start logging. The lifetime field counts down the time remaining.