View the relationships between source types and log sources

Explore the many-to-many relationships between source types and log sources in Health Log Analytics to help you optimize your data input mapping.

Before you begin

Role required: evt_mgmt_admin

About this task

Health Log Analytics uses source types to parse logs and utilizes log sources as the framework for detecting anomalies. Each source type provides logs that are analyzed by multiple log sources, and each log source receives logs that are parsed by multiple source types. Reviewing the associations between source types and log sources can help you improve your data input mapping for better performance and outcomes.

Procedure

1. Navigate to All > Health Log Analytics > Mapping > Data Input Mapping.
2. Ensure that log data is streaming into your instance, and then open a data input mapping record.
3. View the associations between the log sources and the source types.
   • View the log sources that are associated with a source type:
     1. Open the Source Types tab to view the generated source type structures.
     2. Open a source type structure record.
     3. Select a source type.
     4. Under Sources, view all the log sources that receive data from this source type.
   • View the source types that are associated with a log source:
     1. Open the Sources tab to view the generated log sources.
     2. Select a log source record.
     3. On the Source Types tab, view all the source types that feed data into this log source.
   Note:

   The displayed results are updated once a day. Results that are older than 24 hours are deleted automatically.