...
Analysts working with Devo later use the tag as a way of identifying the log file they want to query using the Finder. When a tag is selected in the Finder, the events in the file are parsed for display in the query window, using the parser associated with that tag.
...
At the data source. For example, rsyslog offers the ability to associate tags to the data it sends.
By the Devo In-house Relay. Tags are applied by rules that process incoming events depending on the relay entry port.
...
| Note |
|---|
You can only use the tags in the List of Devo parsers or tags that have been defined for you by the Devo Professional Services team. These are the tags associated with the utility necessary to parse the associated events. In most cases, unless otherwise indicated, the tags are listed by the first few "fixed" levels, and subsequent levels can be user-defined, or "free". |
...
Proprietary logs or data from a product not yet supported by Devo can be marked with the tag my.app. This tag has been defined specifically for all types of common data coming from unknown sources. The first time Devo receives an event with a tag starting with my.app, it will generate a notification to inform you.
...
Related articles
...
...