Documentation forLog Analyzer
Analyzing logs is a key capability of SolarWinds Observability Self-Hosted (formerly Hybrid Cloud Observability) and is available in the Essentials edition. Log Analyzer (LA) is also available in a standalone module.

Import and export rules in LA

  1. Under My Custom Rules, rules can be imported or exported.

    Default rules are not exported.

  2. Select a specific rule to export, or click Export All Rules. Click Import Rules to select rules from your device to import.

  3. Once selected rules are exported, a toast message will display.

    If multiple rules are exported, a separate toast message will display.

Files are imported and exported using JSON file format. Since JSON files can be manually modified, each imported rule is validated. Invalid rules will not be imported.

Troubleshooting

If nothing happens when the JSON rule file is selected:

  • This action may occur when importing the same file two or more times. Refresh the page (F5) and repeat the action.

A toast message indicates that a rule was skipped during the import:

  • A rule with the same ID already exists, or

  • The rule specifies a parent policy that does not exist or is not supported.

    • Only custom rule policies are allowed.

Some rules were not imported from a selected JSON file:

  • The JSON file was corrupted and unreadable, or

  • The JSON file was modified externally, or

  • The JSON file was exported using an older version that is no longer supported, or

  • The rule in the JSON file was skipped because the rule ID already exists in SolarWinds Platform.

The location to perform troubleshooting related to rule imports can be found in the following log file:

C:\programdata\SolarWinds\Logs\Orion\ApolloWebApi.log

Errors related to rule imports will display the following debug log:

2021-05-24 10:46:12,366 [269] WARN SolarWinds.Orion.LogMgmt.RuleProcessing.ImportExport.RuleImporterV2 - Rule with ID 4d230e11-263e-4d91-b1b5-24213432f8b8 won't be imported as it already exists or is not supported in current configuration

Errors related to unsupported JSON versions will display the following debug log:

2021-05-24 10:14:50,920 [205] ERROR SolarWinds.Orion.LogMgmt.RuleProcessing.ImportExport.RuleImporter - SolarWinds.Orion.LogMgmt.RuleProcessing.ImportExport.Exceptions.IncompatibleVersionException: No rule importer was found for schema version 20

at SolarWinds.Orion.LogMgmt.RuleProcessing.ImportExport.RuleImporter.GetImporter(UInt32 version) in G:\sources\olog-log\Src\Lib\SolarWinds.Orion.LogMgmt.RuleProcessing\ImportExport\RuleImporter.cs:line 71

at SolarWinds.Orion.LogMgmt.RuleProcessing.ImportExport.RuleImporter.Import(String content) in G:\sources\olog-log\Src\Lib\SolarWinds.Orion.LogMgmt.RuleProcessing\ImportExport\RuleImporter.cs:line 41