Save Event Log
Applies To: Opalis 6.3
The Save Event Log object is used to save entries from an event log so that they can be used later. The Save Event Log object saves the event log entries to a delimited text file in a format that you specify. The object allows you to choose which fields will be saved and allows you to filter against the fields to only allow particular event log entries to be saved. This object uses a satellite license.
The Save Event Log object can be used to create audit trails of problems that occur with a particular application or specific categories of event log entries. These saved files can later be used to track the performance of servers and applications in your network.
Configuring the Save Event Log Object
To configure the Save Event Log object you will need to know the event log that you are saving from, the computer where it is located, the fields that you want to include, and the format of the file. If you require only specific entries to be saved and not the entire event log, you will need to know what fields to filter against as well as what values to filter.
To configure the Save Event Log object
From the Objects pane, drag a Save Event Log object to the active Policy.
Double-click the Save Event Log object icon. The Properties dialog opens.
For information about the settings on the Details tab, the Filters tab, and Output tab, see the following tables.
For information about the settings on the General tab, the Run Behavior tab, and other tabs if applicable, see Common Tabs.
Details Tab
Element | Configuration Instructions |
---|---|
Computer |
Type the computer where the event log is located. Type localhost to specify the Action Server where the Policy is being processed. You can also use the ellipsis ( ... ) button to browse for the computer. |
Log name |
Type the name of the Windows Event Log where the entries that you are saving are located. You can also use the ellipsis ( ... ) button to browse for the event log. Browsing is only available if you have specified a valid Computer. |
Include |
Select all the Event Log fields that you want to save to the file. |
Filters Tab
Element | Configuration Instructions |
---|---|
EventId |
Select and type the specific event ID of the event log entry that you want to save. |
Source |
Select and type the value that the Source field of the event log entires will need to match. |
Category |
Select and type the value that the Category field of the event log entires will need to match. |
Description |
Select and type the value that the Description field of the event log entires will need to match. |
Type |
Select and specify the value that the Type field of the event log entries will need to match. |
Computer |
Select and specify the value that the Computer field of the event log entries will need to match. |
Date |
Select and specify the ranges of dates that the events will need to be from to be included. |
Output Tab
Element | Configuration Instructions |
---|---|
File name |
Type the name of the file where the event log entries will be saved. This file will be saved on the computer where the event log resides. |
If the file exists |
Select the action that you want to take if a file with the same name already exists:
|
File |
Select the format that will be used to save the event log entries to the file:
|
Delimiter |
Type the delimiter that you want to use to separate the fields of each entry. |
Create column headings |
Select to save the column header information when saving a set of entries to a file. The header information contains meta data such as the field names. |
Save Event Log Published Data
The following table lists the element names and descriptions of the data published by this object. For information about the published data elements that are common to all objects, see Policy Workflow Rules.
Element Name | Description |
---|---|
Event log name |
The name of the event log that was saved. |
Computer |
The computer where the event log that was saved resides. |
Name and path of the file where entries are saved |
The full path of the file where the event log was saved. |
Number of Entries |
The number of entries that were saved. |