Skip to main content

Core Module

The Core module is a high-performance and multifunctional tool for data monitoring and analysis. It boasts a wide range of capabilities, ensuring efficient data processing and analytics for various tasks.

The functionality provided by the Core module serves as the foundation in Search Anywhere Framework.

The Core module includes the following components:

Additionally, the Core module implements user management mechanisms for Search Anywhere Framework via user roles.

Custom Analytical Engine

The main feature of this module is its analytical engine, capable of processing data quickly and efficiently. This engine provides high-speed data processing, enabling quick analysis results.

Search Anywhere Concept

Core also provides Search Anywhere functionality, which ensures data storage and efficient data retrieval. Data can be stored in OpenSearch and other sources, providing convenient and fast access to the required information.

Custom Query Language

For query execution and data analysis, the module offers its own query language - **Search Anywhere Framework Language. This language has extensive capabilities and supports pipeline data processing, providing flexibility and power in information analysis.

Examples of simple queries in SAFL:

source windows
| search "192.168.10.16"
source nginx
| search "ERROR"

One of the key features of the Core module is multithreaded data processing during command execution. This allows optimizing the processing of large volumes of data and increases the overall system performance.

In summary, the Core module is a powerful tool for data analysis and monitoring, providing high speed, flexibility, and efficiency in information processing.