Planning for Your Monitoring Policy

Before you run the Monitoring Policy wizard, you must collect the information that is required during the policy creation.

Use the following checklist as preliminary steps to consider before creating the monitoring policy:

Decide what type of template you want to use

The monitoring policy uses a template to define the type of log to be monitored. Use the following process to help you decide:

  1. Analyze your CommCell environment and identify the type of log that you want to monitor. For example, NetApp logs.

    If you have different types of logs, consider creating separate policies for each log type.

  2. Review the list of predefined templates and their properties. For more information, see Monitoring Policy Templates.

    If none of the predefined templates meets your log properties, you can create your own template. For instructions, see Creating a Monitoring Policy Template.

Identify the log files you want to monitor

Based on the template that you plan to use, gather the following log details:

Selected Template Required Information (Log location and associated clients)
Text Log Files and SysLogs
  • Collect the name of the client computers and/or client groups that contain the logs to be monitored.
  • Record the location of the log file. Take the following into consideration:
    • For NetApp Logs, the SnapProtect log directory is already provided in the wizard.
    • If the logs reside in a UNC path or in a NetApp file server, determine the computer from which you want to access the network path, and collect the user credentials to access the network path.
Database N/A

The location of the CommServe database logs is automatically retrieved by the monitoring policy.

Windows Events Collect the name of client computers and/or client groups where you want to monitor Windows events.
On Demand When you upload log files using the Log Monitoring dashboard, the Web Console distributes the files across clients to balance the log indexing workload.
  • Collect the name of the client computers where you want the log files to be uploaded.
  • Determine the staging location on each client (that is, the folder to which the files are uploaded).

Determine the monitoring criteria

Decide which monitoring approach you want to use:

  • Define monitoring criteria to track specific events in the logs

    Templates provide a predefined set of filtering attributes to track data on specific types of logs. To check the filtering attributes that are supported for each predefined template, see the Create/Edit Criteria online help page.

  • Index all the lines in the log files without defining monitoring criteria

    Use this approach to monitor the log data only by using the Log Monitoring dashboard.

    Before you create the monitoring policy, you must set up the Web Console and configure the Analytics engine. For more information, see Setting Up the Log Monitoring Dashboard.

Decide how you want to capture the data

The Monitoring Policy wizard provides options to further customize the way the log data is captured. The following table displays the options that require some preconfiguration steps:

Option Required Information Applicable Templates
Distribute the entire log file when a log event matching the monitoring criteria occurs1 If you plan to upload the file to the FTP site, you must configure the FTP. For instructions, see Setting Up an FTP Location for Monitoring Policies to Upload Log Files. Text Log Files, SysLogs
Enable content indexing to search and analyze logs from the Web Console2 Decide which Analytics engine you want to use.

The engine is configured during the setup of the Log Monitoring dashboard.

Text Log Files, Database, Windows Events, SysLogs, On Demand
1 Configuration is not available if you decide to index all lines in the log without defining the monitoring criteria

2 Required if you decide to index all lines in the log without defining monitoring criteria

Determine the matching pattern to search for indexed log data

If you plan to analyze log data on the Log Monitoring dashboard, you can configure the monitoring policy to use matching patterns to perform the following actions:

  • Extract specific log data and add the data as facets in the search page of the dashboard

    Facets are search filters based on the monitoring policy's properties, such as policy name, associated clients, and filtering attributes.

    Gather the following details to determine the matching pattern:

    • Which regular expression to use for searching the log event
    • Which data type in the log event to extract (integer, float, or string).
  • Find specific log data and modify the data before it is displayed on the dashboard

    This is useful for users who want to change a complex piece of log data with a simple expression.

    Determine the matching pattern (regular expression to find the log data) as well as the expression that will replace the log data found by the matching pattern.

Gather alert details

If you want to create an alert to receive notifications whenever a log event matches with a monitoring criteria, decide on the type of notification that you want to use (for example, emails). See the Configuring Alert Notifications table in Alerts and Notifications to review the list of available alerts and to check if any preconfiguration is needed.

Alert configurations are not available if you plan to index all lines in the log without defining monitoring criteria (that is, to monitor only from the Log Monitoring dashboard).