Tour Lumi
This topic explains how to navigate and use the Imply Lumi UI through the navigation menu. The navigation menu appears on every page in the Lumi UI. When you don't need the menu, you can collapse it to maximize usable screen space.
Explore
The explore view is the default view when you log in to Lumi.
From anywhere in the UI, click Explore in the Navigation menu to access the explore view. You can search events using a combination of expressions in the search bar, the time range selector, and the attributes panel.
The elements in the explore view are as follows:
-
Search bar: Enter search criteria to find events.
-
Events timeline: Number of events created during the selected time range.
-
Time range selector: Range of time to limit search results.
-
Refresh button: Refresh the events list, events timeline, and attributes panel with any new events added to Lumi.
-
Attributes panel: List of user attributes in events.
-
Status indicator: Color indicating the status of an event:
- Unknown, Notice, Debug: Gray
- Ok: Green
- Info: Blue
- Warning: Orange
- Error, Critical: Red
- Alert, Emergency: Dark red
The event collector determines the status of an event and adds it to the system attribute
status
. You can optionally create a pipeline processor to map statuses. -
Events list: List of events that match the search criteria.
Add columns
To manage the display of columns in the events list, click a column heading to display the following options:
- Add column to the left/right.
- Move left/right.
- Remove this column.
You can't remove the Time and Content columns. Time is always on the far left and Content is always on the far right, so the options available for these columns are limited.
Event details pane
Click a specific event in the events list to access the event details.
The event details pane provides a comprehensive view of individual events and help you understand where the data comes from, how it is processed, and its context in the system.
The elements on the event details pane are as follows:
- Search bar: Filter attributes by name or value.
- Message section: Raw event message.
- User attributes: Custom data fields included in the event payload. See User attributes for more information.
- System attributes: Metadata added by Lumi. See System attributes for more information.
See Search events with Lumi for more information.
Pipelines
Click Pipelines in the navigation menu to view a list of your pipelines and processors in order of execution.
Pipelines are ordered lists of event processors that transform events based on a search query that you define.
On the pipelines page you can:
- Create new pipelines and processors.
- Reorder existing pipelines and processors.
- Enable and disable pipelines and processors.
See Transform events with pipelines for more information.
Integrations
Click Integrations in the navigation menu to view and manage your integrations. Each tile represents an integration type, categorized by adding data and querying events. To create a new integration, select the tile for the appropriate integration and follow the instructions provided.
See Send events to Lumi and Search events with Lumi for more information.
Keys
Click Keys in the navigation menu to view and create IAM keys. You use IAM keys to send events to Lumi and to configure federated search from Splunk®.
The keys page displays a list of IAM keys:
Click a specific key in the IAM keys list to access the key details.
The elements on the Overview pane are as follows:
- Key ID: Unique identifier for the IAM key.
- Token: Token associated with the IAM key.
- Description: Description for the IAM key.
- Global attributes: Environment and Team system attributes associated with the IAM key. See System attributes for more information.
The Integrations pane displays details about integrations enabled on the key. The elements on the Integrations pane are as follows:
- Attributes: User attributes associated with the IAM key. See Attributes on an IAM key for more information.
- First seen: Timestamp of the first event added using the IAM key.
- Last seen: Timestamp of the most recent event added using the IAM key.
- Unparsable events: Number of events received using the IAM key that couldn't be parsed.
- Last 24hr: Chart showing IAM key activity over the past 24 hours.
Hover over a bar to see the number of events processed during that hour.
The color of the bar indicates the event status:
- Green: Successful events
- Yellow: Unparsable events
You can add a new integration to the IAM key from the key details page.
See Manage IAM keys for more information.
Users
Click Users in the navigation menu to create users and assign roles. You can also invite users to Lumi.
Click a user to display more information, including the permissions granted for the user's role.
See Manage users for more information.
Roles
Click Roles in the navigation menu to view Lumi roles, their permissions, and users assigned to each role.
See Manage roles for more information.
Billing
Click Billing in the navigation menu to monitor account usage. You can view interactive graphs that display account usage for each metered component as well as a monthly breakdown of usage by attributes.
See Monitor account usage for more information.
Profile menu
Click your name to access the following options:
- My profile: View and edit your account information and assigned roles, and reset your password.
- Mode: Choose how your interface appears:
- Light: Light background with dark text.
- Dark: Dark background with light text.
- Auto: Automatically match your device's theme setting.
- Timezone: Change your timezone. By default, Lumi uses your device’s timezone.
- Log out: Log out of your account.