Planning for Your Monitoring Policy
Before you run the Monitoring Policy wizard, you must collect the information that is required during the policy creation.
Use the following checklist as preliminary steps to consider before creating the monitoring policy:
Decide what type of template you want to use
The monitoring policy uses a template to define the type of log to be monitored. Use the following process to help you decide:
- Analyze your CommCell environment and identify the type of log that you want to monitor. For example, NetApp logs.
If you have different types of logs, consider creating separate policies for each log type.
- Review the list of predefined templates and their properties. For more information, see Monitoring Policy Templates.
If none of the predefined templates meets your log properties, you can create your own template. For instructions, see Creating a Monitoring Policy Template.
Identify the log files you want to monitor
Based on the template that you plan to use, gather the following log details:
|Selected Template||Required Information (Log location and associated clients)|
|Text Log Files and SysLogs||
The location of the CommServe database logs is automatically retrieved by the monitoring policy.
|Windows Events||Collect the name of client computers and/or client groups where you want to monitor Windows events.|
|On Demand|| When you upload log files using the Log Monitoring dashboard, the Web Console distributes the files across clients to balance the log indexing workload.
Determine the monitoring criteria
Decide which monitoring approach you want to use:
Define monitoring criteria to track specific events in the logs
Templates provide a predefined set of filtering attributes to track data on specific types of logs. To check the filtering attributes that are supported for each predefined template, see the Create/Edit Criteria online help page.
Index all the lines in the log files without defining monitoring criteria
Use this approach to monitor the log data only by using the Log Monitoring dashboard.
Before you create the monitoring policy, you must set up the Web Console and configure the Analytics engine. For more information, see Setting Up the Log Monitoring Dashboard.
Decide how you want to capture the data
The Monitoring Policy wizard provides options to further customize the way the log data is captured. The following table displays the options that require some preconfiguration steps:
|Option||Required Information||Applicable Templates|
|Distribute the entire log file when a log event matching the monitoring criteria occurs1||If you plan to upload the file to the FTP site, you must configure the FTP. For instructions, see Setting Up an FTP Location for Monitoring Policies to Upload Log Files.||Text Log Files, SysLogs|
|Enable content indexing to search and analyze logs from the Web Console2|| Decide which Analytics engine you want to use.
The engine is configured during the setup of the Log Monitoring dashboard.
|Text Log Files, Database, Windows Events, SysLogs, On Demand|
|1 Configuration is not available if you decide to index all lines in the log without defining the monitoring criteria
2 Required if you decide to index all lines in the log without defining monitoring criteria
Determine the matching pattern to search for indexed log data
If you plan to analyze log data on the Log Monitoring dashboard, you can configure the monitoring policy to use matching patterns to perform the following actions:
Extract specific log data and add the data as facets in the search page of the dashboard
Facets are search filters based on the monitoring policy's properties, such as policy name, associated clients, and filtering attributes.
Gather the following details to determine the matching pattern:
- Which regular expression to use for searching the log event
- Which data type in the log event to extract (integer, float, or string).
Find specific log data and modify the data before it is displayed on the dashboard
This is useful for users who want to change a complex piece of log data with a simple expression.
Determine the matching pattern (regular expression to find the log data) as well as the expression that will replace the log data found by the matching pattern.
Gather alert details
If you want to create an alert to receive notifications whenever a log event matches with a monitoring criteria, decide on the type of notification that you want to use (for example, emails). See the Configuring Alert Notifications table in Alerts and Notifications to review the list of available alerts and to check if any preconfiguration is needed.
Alert configurations are not available if you plan to index all lines in the log without defining monitoring criteria (that is, to monitor only from the Log Monitoring dashboard).