Configuration of EgSysLogAppTest

This test periodically mines the Syslog file for specific patterns of error/warning messages configured by administrator and reports the number of messages that match each configured pattern. This way, administrator is alerted to the errors/warnings at the systems and enabled to initiate the necessary remedial actions swiftly.

The default parameters associated with this test are as follows:

• The TEST PERIOD list box helps the user to decide how often this test needs to be executed.

• In the HOST text box, specify the IP address of the host for which this test is to be configured.

• In the PORT text box, specify the port at which the HOST listens. By default, this is NULL.

• In the EXCLUDE PATTERNS text box, specify a comma-separated list of error or warning message patterns to exclude from monitoring. Your pattern specification can be of any of the following formats: *error or warning messages*. This parameter is set to none by default, which indicates that no message will be excluded from monitoring.

• Specify a comma-separated list of error or warning message patterns to be monitored in the INCLUDE PATTERNS text box. The format of your specification should be: patternName:Pattern, where patternName refers to the unique name that you assign to every pattern configuration, which will appear as the descriptor of this test, and Pattern refers to any message pattern of the form *error or warning messages*. Multiple pattern specifications can be provided as: patternName1:Pattern1,patternName2:pattern2. This parameter is set to all:all by default, which indicates that all error/warning messages will be monitored by default.

• This test reports metrics by parsing a Syslog file. Specify the full path to the Syslog file in the SYSLOGFILE text box. For instance: C:\eGurkha\agent\syslog\syslog.

• By default, the ROTATINGFILE parameter is set to No. To instruct the eG Enterprise system to monitor newer log files also, set this parameter to Yes. Otherwise, set it to No.

• The DD FREQUENCY refers to the frequency with which detailed diagnosis measures are to be generated for this test. The default is 1:1. This indicates that, by default, detailed measures will be generated every time this test runs, and also every time the test detects a problem. You can modify this frequency, if you so desire. Also, if you intend to disable the detailed diagnosis capability for this test, you can do so by specifying none against DD FREQUENCY.

• To make diagnosis more efficient and accurate, the eG Enterprise suite embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the DETAILED DIAGNOSIS capability of this test for a particular server, choose the On option. To disable the capability, click on the Off option.

  The option to selectively enable/disable the DETAILED DIAGNOSIS capability will be available only if the following conditions are fulfilled:

  • The eG manager license should allow the detailed diagnosis capability

  • Both the normal and abnormal frequencies configured for the detailed diagnosis measures should not be 0.

• If multiple components of the same component type are awaiting configuration, then an APPLY TO OTHER COMPONENTS check box will appear in this page. Clicking on this check box will allow you to apply the configuration to all/selected components of that type.

• Once the necessary values have been provided, clicking on the UPDATE button will register the changes made.

When changing the configuration for specific servers, a “*” beside the text box corresponding to the parameter signifies that these values have to be manually configured by the user. The parameter values that require to be configured will typically be prefixed with a “$“ or contain a series of “*”. A value of "none" in the parameter value indicates that the corresponding parameter value can be changed if required.