clusterdetails
Use this command to look at log data within categories for specific classify results It enables you to expand a message signature into the individual log entries.
Syntax
clusterdetails collection=<collection_name> [<summary_expression>]Parameters
The following table lists the parameters you can use with this command, along with their descriptions.
| Parameter | Description |
|---|---|
|
|
Use this parameter to specify the collection where the log data exists. The value for this variable should either be in the format |
|
|
Use this parameter to compare the ID to an expression. The value for this parameter should either be in the format |
|
|
Use this parameter as a comparison operator. The possible values for this variable include |
|
|
This parameter should be in the format |
The following query returns the fatal logs included in ID 1, in the collection ‘Fatal logs’.
Severity = fatal | clusterdetails collection = 'Fatal logs' id = 1