Server Log Filter
You can filter data in the
Server Log Viewer so that only records that meet specified conditions are displayed in the list. To open the
Filter dialog box, choose
Filter from the shortcut menu on
Server Log Viewer or click
on the toolbar.
The server log filter is configured in the same way as the audit log filter described in
Audit Log Filter (Service).
To set up a filter, select the Enable filter check box on the respective tab depending upon whether to configure include or exclude conditions.
Note: The mark next to the tab name turns green if the filter on that tab is enabled. Otherwise, the mark is gray. |
When the filter is enabled, you can define its condition by entering values into the following fields:
•Event types - Select check boxes to filter events by type:
•Success - Task or operation completed successfully.
•Information - Certain action performed.
•Warning - A problem might occur unless action is taken.
•Error - A problem has occurred.
•String fields intended to include or exclude event records depending upon whether event data matches the filter string specified. For example, to filter records by the name of the server on which the event occurred, specify a filter string in the Server field. To filter records with certain event IDs, enter ID numbers separated by a semicolon in the Event ID field.
The following string fields are available:
•Information - Event-specific information, such as error/warning descriptions, names and values of changed parameters, and so on.
•Server - The name of the computer running DeviceLock Enterprise Server on which the event occurred.
•Event ID - The ID number of the event.
•From, To - The time range settings to filter events by time they were logged by the server.
•Consolidation - The fields to filter by log consolidation-related data (see
Consolidating Logs):
•Server - The name of the remote server from which the event was collected during log consolidation. This field is case-insensitive, and allows the use of wildcards (* and ?). To enter multiple values, separate them with a semicolon (;).
•From, To - The time range settings to filter events by time they were last received from the remote server during log consolidation.
For each time range, the following settings are available:
•From - The beginning of the time range. Possible values:
•First Record - Filter starting with the earliest date and time in the respective log field.
•Records On - Filter starting with a particular date and time.
•To - The end of the time range. Possible values:
•Last Record - Filter ending with the latest date and time in the respective log field.
•Records On - Filter ending with a particular date and time.
Note: To assist with configuring a filter, string setting fields store previous entries and suggest matches for what is being typed. Previous entries are also available on the drop-down list of options for the setting field. |
When configuring a filter, consider the following:
•Filter conditions are combined by AND logic, that is, a given record matches the filter if it matches each of the filter conditions. Clear the fields that are not to be used in the filter conditions.
•Filter string fields may include wildcards, such as an asterisk (*) or a question mark (?). An asterisk represents zero or more characters; a question mark represents any single character.
•A filter string field may include multiple values separated by a semicolon (;). In this case, the values are combined by OR logic, that is, a given record matches the filter condition on a particular field if it matches at least one of the values specified in that field.
•The Clear button in the Filter dialog box provides the option to remove all the defined filter conditions and start setting up a new filter from scratch.
•The Save and Load buttons in the Filter dialog box are used to save the filter conditions to a file and to load previously saved filter conditions from a file.
