Consolidation & Monitoring Options

<< Click to Display Table of Contents >>

Navigation:  Monitoring with EventSentry > Log File Monitoring >

Consolidation & Monitoring Options

Once a file has been added to a package, you will have to instruct EventSentry what to do with its content. You can either consolidate lines from the log file to a database, log the text to the application event log, or both. In addition, EventSentry allows you to include or exclude lines based on the keywords.

 

Storing Log Files in a Database

To consolidate content from log files in a database, click the "Database Consolidation" tab and select a database destination from the "Destination" section by clicking the "Add" button. You can specify up to four different databases.

 

By default, all lines parsed from the log file will be sent to the specified database(s). To change this behavior, you can either exclude certain lines from being added to the database (include all, exclude some), or only send specific lines to the database. Click the + icon to add strings that will trigger the database.

 

Include: Log all lines to the database, except for exclusions below

This is the default setting, and it will send all parsed lines from the log file to the database. Lines in the log file containing strings that are listed below will not be sent to the database. This allows you to conserve space in the database if your log file contains unneeded content.

 

Exclude: Only log lines to the database that are included below

This setting is more restrictive and will only send lines from the log file to that database that are listed below. This allows you to only send content to the database that matches your filters. For example, you can only send lines that contain "Error" or "Warning" to the database to aid troubleshooting.

 

Logging lines from the log file to the event log

To log lines from log files to the application event log, click the "Event Log Alerts" tab and check the "Log to APPLICATION Event Log" check box. You can also select the severity under which entries in the event log are written as.

 

Context

When a matching line in a log file is found, the alert can contain up to 5 lines before and after of the matching line to provide context. Set to "None" to disable the log context feature.

 

By default, no lines parsed from the log file will be logged to the event log. Click the + icon to add strings that will trigger event log alerts.

 

Include: Log all lines to the event log, except for exclusions below

This setting will log all parsed lines from the log file to the event log. Lines in the log file containing strings that are listed below will not be logged to the event log. This setting is not recommended as it can quickly fill the application event log.

 

Exclude: Only log lines to the database that are included below

This is the default setting, and will log lines from the log file to the event log that match the strings listed below. This allows you to only send content to the event log that matches your filters. For example, you can only log lines that contain "Error" or "Warning" to the event log to aid troubleshooting.

 

Text Match Type

Specifies whether text matching uses simple wild card matching or regex pattern matching.