Hydrate a specific log

  1. To hydrate specific logs from an archive, hover the cursor over the last column in the table; when the Hydrate button appears, click it.

hydrate individual log

  1. The Hydrating from …​ interface appears.

  2. To hydrate a log, complete these tasks:

    Hydrate log archive interface

    • Set Time Range

    • Set Filter

    • Add Tags

    • Set Retention

      • Step 1 Set Time Range

        In Set Time Range (required), select the start and end time. Note that you can specify time measurement either in UTC or in local browser time.

        If you don’t explicitly specify the time range, Kloudfuse uses the default of 1 week after the start of the archive.

        The time selection options are:

        • Absolute time range using the time picker.

        • Quick ranges, such as “Next 5 minutes”, “Next 15 minutes”, and so on, through to “Next 3 days”.

          This assumes the start at the beginning of the first record of the object, and ending calculated by adding the quick range selection.

      • Step 2 Set filter

        Filter settings are optional.

        Set filter to hydrate log entries that match the specified key/value pairs.

        You can specify multiple filters; Kloudfuse combines them through AND logic. So, a record must match all filters to be hydrated.

        If you don’t specify filters, Kloudfuse potentially hydrates all log records that match the other criteria.

      • Step 3 Add tags

        Tag settings are optional.

        Set tags to add the same attribute to all hydrated records.

        Specify key/value pairs for each tag. You can specify multiple tags.

        If the log entry already uses a specified key, Kloudfuse overwrites the value attribute.

      • Step 4 Set Retention

        Set retention (required) to specify how long you want to keep the hydrated records on the Kloudfuse platform. Default retention is 7 days.

  3. Click Hydrate to start log hydration.

  4. The system notifies you that it started the Hydration job.

  5. Switch to the Jobs tab to monitor the progress of the hydration job.

    hydration jobs interface

    This interface provides a historical overview of all archival jobs by Name, Start Time and End Time, the Status of the job (see Hydration job status), Progress for the currently running job, Filters, Tags, Created at (date and time), and Retention period of the hydrated logs.

    Each job also has a unique job id that you can use to locate the hydrated logs in the logs search page. All hydrated logs have the label __kf_hydration_job : <unique_job_id>.

  6. After successful hydration and indexing, the log is inside the Kloudfuse system, and can be reviewed and analyzed like other logs.

    The user can see the logs from the hydration job by clicking the Logs button and opening a new tab filter set to the job id.

  7. You can cancel a hydration job in progress. Any log lines that have been hydrated before the cancel command remain visible, through the retention time specified in the hydration job.