Oracle Cloud Infrastructure Documentation

Create a Field

Oracle Logging Analytics offers multiple Oracle-defined fields to use in parsers and extended field definitions. If you can’t find the right field names that you’re looking for, create custom fields that can be used with parse expressions.

Note that there are limits to the number of custom fields that can be created. Before you create a field, a message on the console will indicate the number of remaining labels for each data type that you can create.

  1. Open the navigation menu and click Observability & Management. Under Logging Analytics, click Administration. The Administration Overview page opens.

    The administration resources are listed in the left hand navigation pane under Resources. Click Fields.

  2. In the Fields page, click Create Field.
  3. In the Create Field page, in the Name field, enter the name of the field you want to create. For example, enter My Custom Field.
  4. In the Type select the type of field data.
    • String Type: This field stores any type of text in lower case, for example, the texts KERNEL and Kernel are both stored as kernel. The count of occurrence of the text kernel is displayed in the Log Explorer as 2.
    • String (Case Sensitive) Type: This field stores any type of text by retaining the original case of the text, for example, the texts KERNEL and Kernel are both stored in their original cases. In the Log Explorer, the count of occurrence of each of the above text is 1 respectively. You can create a maximum of 10 fields of the type String (Case Sensitive).
    • Float Type: This field stores a numeric value with a decimal point. It can contain single-precision 32-bit IEEE 754 floating point values.
      • Min Value Allowed: 1.401298464324817E-45
      • Max Value Allowed: 3.4028234663852886E38
    • Long Type: This field stores a very large numeric whole value. It can contain 64-bit signed two's complement integer values.
      • Min Value Allowed: -9223372036854775808
      • Max Value Allowed: 9223372036854775807
    • Integer Type: This field stores a numeric whole value.
    • Timestamp Type: This field stores a time-based field in a standard format.
  5. If the field can have multiple values in the log content, then select the Multi value check box.

    You can create a maximum of 5 multi-valued fields of the type String (Case Sensitive).

  6. In the Description field, enter the description of field. This description can help you to identify the field in the Fields page.
You can now use the new custom field in a parser definition. See Create a Parser.

After you have ingested logs with a parser using your custom field, you can use it in the log explorer for filtering and searching. See Filter Logs by Pinned Attributes and Fields.

You can also use the field for visualizing and analyzing the log data using charts and controls. See Visualize Data Using Charts and Controls.