OpenRefine

How to import one or more archives into a locally-installed application called OpenRefine (formerly Google Refine) to manipulate and export logs.

Import

Download and install OpenRefine here.

Download a log archive, which is in tab-separated value (TSV) format (more).

Start OpenRefine, which will load it in a Web browser. Upload the archive file and let OpenRefine auto-detect its settings. Un-check “Parse next 1 lines as column headers”:

refine-1.jpg

Functionality

Faceting

In the column header dropdown menu, choose Facet -> Text facet. This will start as a simple count of occurrences of the values in that column (such as by program name or sending system). See faceting on OpenRefine wiki.

Filtering

In the column header dropdown menu, choose Text filter. A sidebar menu supports text filtering. The sidebar supports filtering the message column with a string or regular expression.