Log settings

The Log settings page sets log policies for Network Monitor. Network Monitor is continuously writing a system log containing information about various system events and other status information. This log is written to the KNM\logs folder of the KNM host machine. Network Monitor can also be configured to send log information to various services.

Log policies are set using the following tabs.

Windows event log
Syslog
SNMP traps
Retention

Windows event log tab

Windows event log - If checked, Network Monitor stores log information in the Windows Event log in the Application log folder.

Syslog tab

Syslog - If check, Network Monitor sends log information to a syslog daemon. Specify the address and port number to a host with a running syslog server. The Network Monitor syslog client uses the UDP protocol and port 514 by default.
Syslog server - The address of the syslog server receiving the log information.
Syslog port - The port number of the syslog server.
Note: Network Monitor can also enable its own Syslog server that receives syslog messages from other devices on the same network. This is a separate Syslog server checkbox on the > Other > Other system settings > Other settings tab.

SNMP trap tab

SNMP trap - If checked, Network Monitor sends all log information as SNMP traps to a remote trap console.
Note: Kaseya has created a custom MIB file that can be imported by the software receiving traps from Network Monitor. You can find the MIB file, named knm.mib, in the \mibs directory.
Trap receiver - The host name or IP number of the receiver of the traps.
Trap port - Port number that the trap receiver listens to.
Community - SNMP trap community string.
Note: Use the Advanced tab of a gateway node to receive SNMP trap messages on a network.

Retention

Specifies how long to keep data—Forever, Month, Quarter, Year—for the following. Month, quarter and year settings represent a count of days from the current day: 30, 90 and 365 days.

Log retention
Record retention
Toplist retention