Next Topic

Previous Topic

Book Contents

Event Log Settings

Agent > Event Log Settings

The Event Log Settings page specifies the event log types and categories included in the Log History.

Note: When 10000 or more event log entries of a particular type get backed up in the database, that type of event for that specific event log gets disabled. For example, if a domain controller floods the server with Security events of type Success Audit then the system stops collection of Success Audit Security events. All other types continue to get collected. If this occurs, an entry is written to the Configuration Changes log saying that *System* has changed the event log settings.

To specify Event Log Settings:

  1. Click an event log type in the Event Log Types list box. Hold down the [Ctrl] key to click multiple event log types.
  2. Click Add > or Add all >> to add event log types to the Assigned Event Types list box. Click << Remove or << Remove all to remove event log types from the Assigned Event Types list box.
  3. Check one or more event categories: Error, Warning, Information, Success Audit, Failure Audit, Critical, Verbose.
  4. Select one or more machine IDs.
  5. Click Update or Replace to apply these settings to selected machine IDs.

Update

Adds event log types listed in the Assigned Event Types list box to the set of event log types already assigned to selected machine IDs.

Replace

Replaces all event log types assigned to selected machine IDs with the event log types listed in the Assigned Event Types list.

Clear

Clears all event log types assigned to selected machine IDs.

Select All/Unselect All

Click the Select All link to check all rows on the page. Click the Unselect All link to uncheck all rows on the page.

Check-in status

These icons indicate the agent check-in status of each managed machine:

Agent has checked in

Agent has checked in and user is logged on. Tool tip lists the logon name.

Agent has not recently checked in

Agent has never checked in

Online but waiting for first audit to complete

The agent is online but remote control is disabled

The agent has been suspended

Machine.Group ID

The list of Machine ID.Group IDs displayed is based on the Machine ID / Group ID filter and the machine groups the administrator is authorized to see using System > Group Access.

Delete Icon

Click the delete icon to delete an event log.

Edit icon

Click the edit icon next to a event log to automatically set header parameters to those matching the selected event log.

Assigned Categories

The event categories stored by the VSA for this machine ID and event log:

  • Error
  • Warning
  • Information
  • Success Audit
  • Failure Audit
  • Critical - Applies only to Vista.
  • Verbose - Applies only to Vista.