Structuring Templates

System Templates

You can choose from multiple system templates, but cannot modify the field types in them or delete the fields. For details, see Table 1.

1. Click System template and select a template. A sample log event is displayed for each template.

2. When you select a template, the log parsing result is displayed in the Template Details area. Click Save.
   

   • During log structuring, if a system template is used, the time in the system template is the customized log time.
   • Fields of the string type do not support range query using the >, =, or < operators or the "in" syntax. Use asterisks (*) or question marks (?) for fuzzy query. You need to reconfigure the structuring and change the value of this field to a number.

   Table 1 System template fields

   Structuring Method	Field Name	Field Type Can Be Changed	Field Can Be Deleted
   ELB structuring template	Defined by ELB.	No	No
   VPC structuring template	Defined by VPC.	No	No
   CTS structuring template	Keys in JSON log events.	No	No
   APIG structuring template	Defined by APIG.	No	No
   DCS audit logs	Defined by DCS.	No	No
   Tomcat	Defined by Tomcat.	No	No
   Nginx	Defined by Nginx.	No	No
   GAUSSV5	Defined by GAUSSV5.	No	No
   DDS audit logs	Defined by DDS.	No	No
   DDS error logs	Defined by DDS.	No	No
   DDS slow query logs	Defined by DDS.	No	No
   CFW access control logs	Defined by CFW.	No	No
   CFW attack logs	Defined by CFW.	No	No
   CFW traffic logs	Defined by CFW.	No	No
   MySQL error logs	Defined by MySQL.	No	No
   MySQL slow query logs	Defined by MySQL.	No	No
   PostgreSQL slow query logs	Defined by PostgreSQL.	No	No
   PostgreSQL error logs	Defined by PostgreSQL.	No	No
   SQL Server error logs	Defined by SQL Server.	No	No
   GaussDB(for Redis) slow query logs	Defined by GeminiDB Redis.	No	No
   SMN	Defined by SMN.	No	No
   GAUSSDB_MYSQL error logs	Defined by GaussDB_MySQL.	No	No
   GaussDB_MySQL slow query logs	Defined by GaussDB_MySQL.	No	No
   ER Enterprise Router	Defined by ER.	No	No
   MySQL audit logs	Defined by MySQL.	No	No
   GaussDB(for Cassandra) slow query logs	Defined by GeminiDB Cassandra.	No	No
   GaussDB(for Mongo) slow query logs	Defined by GeminiDB Mongo.	No	No
   GaussDB(for Mongo) error logs	Defined by GeminiDB Mongo.	No	No
   WAF access logs	Defined by WAF.	No	No
   WAF attack logs	Defined by WAF.	No	No
   DMS rebalancing logs	Defined by DMS.	No	No
   CCE audit logs	Defined by CCE.	No	No
   CCE event logs	Defined by CCE.	No	No
   GaussDB(for Redis) audit logs	Defined by GeminiDB Redis.	No	No

Custom Templates