Save Event Log

Applies To: Opalis 6.3

The Save Event Log object is used to save entries from an event log so that they can be used later. The Save Event Log object saves the event log entries to a delimited text file in a format that you specify. The object allows you to choose which fields will be saved and allows you to filter against the fields to only allow particular event log entries to be saved. This object uses a satellite license.

The Save Event Log object can be used to create audit trails of problems that occur with a particular application or specific categories of event log entries. These saved files can later be used to track the performance of servers and applications in your network.

Configuring the Save Event Log Object

To configure the Save Event Log object you will need to know the event log that you are saving from, the computer where it is located, the fields that you want to include, and the format of the file. If you require only specific entries to be saved and not the entire event log, you will need to know what fields to filter against as well as what values to filter.

To configure the Save Event Log object

  1. From the Objects pane, drag a Save Event Log object to the active Policy.

  2. Double-click the Save Event Log object icon. The Properties dialog opens.

  3. For information about the settings on the Details tab, the Filters tab, and Output tab, see the following tables.

  4. For information about the settings on the General tab, the Run Behavior tab, and other tabs if applicable, see Common Tabs.

Details Tab

Element Configuration Instructions

Computer

Type the computer where the event log is located. Type localhost to specify the Action Server where the Policy is being processed. You can also use the ellipsis ( ... ) button to browse for the computer.

Log name

Type the name of the Windows Event Log where the entries that you are saving are located. You can also use the ellipsis ( ... ) button to browse for the event log. Browsing is only available if you have specified a valid Computer.

Include

Select all the Event Log fields that you want to save to the file.

Filters Tab

Element Configuration Instructions

EventId

Select and type the specific event ID of the event log entry that you want to save.

Source

Select and type the value that the Source field of the event log entires will need to match.

Category

Select and type the value that the Category field of the event log entires will need to match.

Description

Select and type the value that the Description field of the event log entires will need to match.

Type

Select and specify the value that the Type field of the event log entries will need to match.

Computer

Select and specify the value that the Computer field of the event log entries will need to match.

Date

Select and specify the ranges of dates that the events will need to be from to be included.

Output Tab

Element Configuration Instructions

File name

Type the name of the file where the event log entries will be saved. This file will be saved on the computer where the event log resides.

If the file exists

Select the action that you want to take if a file with the same name already exists:

  • Create a file with a unique name - Select to append a value to the filename to create a unique name that does not conflict with an existing name.

  • Append - Select to append the entries that are being saved to the file.

  • Overwrite - Select to overwrite the existing file with the file that is being created.

  • Fail - Select to cause the Save Event Log object to fail if the filename already exists.

File

Select the format that will be used to save the event log entries to the file:

  • CSV delimited - Select to use the CSV format to write each log entry.

  • TAB delimited - Select to separate fields in each entry using the TAB character.

  • Custom delimited - Select to separate fields in each entry using a custom character that you specify in the Delimiter box.

Delimiter

Type the delimiter that you want to use to separate the fields of each entry.

Create column headings

Select to save the column header information when saving a set of entries to a file. The header information contains meta data such as the field names.

Save Event Log Published Data

The following table lists the element names and descriptions of the data published by this object. For information about the published data elements that are common to all objects, see Policy Workflow Rules.

Element Name Description

Event log name

The name of the event log that was saved.

Computer

The computer where the event log that was saved resides.

Name and path of the file where entries are saved

The full path of the file where the event log was saved.

Number of Entries

The number of entries that were saved.