Log collection failure alerts
Device down alert:
When configured devices don't respond to pings from EventLog Analyzer, it implies either of the following:
- The selected Syslog devices are not sending logs to EventLog Analyzer.
- EventLog Analyzer has not collected logs from the Windows devices for the assigned interval time, triggering an alert to the configured email address.
For Windows devices, last scan time will be considered. On the other hand, last message time will be taken into account for Syslog devices.
Note: The device down alert signals when the time lapsed since the last message exceeds the time interval set by the end user.
Low disk space alert:
Since EventLog Analyzer requires a minimum of 5GB of free space, an alert is generated and sent as an email notification to admins when the disk space available in the local directory, index directory, product database, or archive directory goes below 5GB. You can change this setting manually by navigating to Settings > Admin Settings > Product Settings > Product Notifications.
New to ADSelfService Plus?
Related Articles
Enabling historic log collection in EventLog Analyzer
EventLog Analyzer collects all the logs present in the Windows Event Viewer (i.e., Windows Logs > Application, Security, System) when the historic log collection option is enabled. To enable historic log collection, follow the steps below: Navigate ...Understanding your log management solution
Key log terminologies When managing logs, there are terminologies that will help you make the most of the product in hand. Following are the list of such terms and their definitions as used in EventLog Analyzer. Agentless and agent-based log ...Application and services log collection
EventLog Analyzer supports the collection of application and services logs from the Event Viewer. For example, to successfully collect PowerShell logs from Windows, you have to add a key inside the registry of the respective client machine from which ...Setting up alerts
How to: Hint on setting up alerts First, always check if any of the predefined alert criteria would satisfy the requirement. Proceed with custom alerts only if the requirement is very peculiar. Log on to GUI ⇾ Go to the "Alerts" tab ⇾ click on "Add ...Does the given credentials of a Windows device have permission for log collection?
Case 1: The account is a local administrator or a domain administrator. The credentials will, by default, have the required permissions. Case 2: The account is a non-admin domain user. Provide the non-admin domain user with the required permissions. ...