Searching Log Data on the Log Monitoring Dashboard

You can search for specific log events to monitor the log activity in your environment. Search operations can be grouped into the following methods:

  • Global search

    You can search for a particular event across all the log events indexed on the dashboard.

  • Entity-based search

    You can search log events associated with a particular client, log file, template or monitoring policy.

Procedure

  1. From the My Applications page in the Web Console, click Log Monitoring.
  2. On the Default dashboard page, perform a search using one of the following methods:
    • Global search

      At the upper left of the dashboard page, click Search. The Search page is displayed, which includes recent search history and all saved searches.

    • Entity-based search

      The Default dashboard displays all clients, log files, template and policies used for monitoring the log data. You can refine your search by selecting the entity containing the log data that you are looking for.

      For example, if you want to search the log data monitored for a specific client, click the client name listed in the Clients table. To see the complete list of clients, client View All next to the table.

      The information for all indexed events for the selected client, log file, template, or monitoring policy appears in the Time Line chart and the Event Log table.

  3. Optional: to search for log events that occurred within a specific period of time, click the time range list and select the time range that you want to apply to the search.

    If the time range you want to use is not in the list, select Custom to define your own time range.

  4. On the search bar, type your search criterion, and then click Search.

    The Time Line chart and the Event Log table display the search results.

  5. Optional: to further refine your search results, you can apply filters.

    Under the Time Line chart, in the facet list, expand the facet that you want to use to display the associated search filters. For example, expand Client to select the clients whose log data you want to analyze.

  6. Optional: you can save the search criterion. This is useful if you plan to check the search results on a regular basis.
    1. On the search bar, click the star button .

      The Save Current Search dialog box is displayed.

    2. In the Search box, enter a name for your search and click Save.

      The search is added to the list of saved searches in the Saved Search table.

    You can display the results of your search in a chart or table on the dashboard page. To add a chart or table, see Adding a Chart or Table to the Log Monitoring Dashboard.

Example: Searching for Reconfigured Storage Policies

Suppose you configured a monitoring policy to track Audit Trail events in the CommServe database. If you want to find out whether a specific storage policy was reconfigured in the last seven days, use the following steps to perform the search:

  1. On the Default dashboard page, in the Templates table, click Audit Trail.

    The Search page is displayed.

  2. In the time range list, click the down arrow, and then select Last 7 Days.

    The page reloads.

  3. In the search bar, type the name of the storage policy and click Search.

    The page reloads.

  4. To save your search criterion, click the star button .
  5. In the Save Current Search dialog box, do the following:
    1. In the Search box, type SPName Weekly Reconfig Check.
    2. Click Save.

What To Do Next

After a search operation, you can perform any of the following actions: