Allow Users to see Specific entries from SysLog.

[patbishop]

I have a requirement to provide a team (with specific roles) access to the syslog table, however, only show records where the message would contain a specific set of keywords. 

We get over 1 million log records a day. When I manually run a filter, many times it times out running.   The initial thought was to create a module that these users would access, but when clicked, would only show the filtered specific records that the users are intended to see. 

I've been told that I cannot create a custom table to split the records into.   Does anyone have any suggestions leveraging Before/Display Business rules? 

[sushantmalsure]

Hi @patbishop 

I think creating a seperate module with fixed query filter (keyword + created on today) is still a best option you have.

Writing Before BR on logs tables will just add more complexity and loading time to have performance impact.

[patbishop]

That's what I originally did but even with the logs stripped down to 1 day, the module would spin forever. 

[sushantmalsure]

Then BR will make it more worse.

You can think of defaulting the filter to last 15 mins and give user ability to change the filter with warning 'It may take some more time'.