Device Management

The devices to be monitored by EventLog Analyzer can be managed in this section. Devices can be added, edited, or deleted. All the devices that are being monitored can be viewed. The device management page contains three tabs viz. Windows Devices, Syslog Devices, and Other Devices.

Settings > Configuration > Manage Devices

• Manage Devices
• Adding a Domain and Updating a Domain or Workgroup 
• Configuring Auto Log Forward
• Manage Device Groups

Manage Devices

How to add a device?
To add a device, refer to Add Device.

Select the device(s) by selecting the respective check box(es).

Delete the device(s) using the delete icon in the action menu.

How to disable, enable a device?
Select the device(s) by selecting the respective check box(es).
Disable or enable the device(s) using the disable or enable icons in the action menu respectively.

How to update monitor interval?
Select the device(s) by selecting the respective check box(es).

Click the monitor interval button to set the monitor interval. Note that the minimum monitor interval is 10 minutes.

How to update a device?
Navigate to Configuration > Manage Devices.
Hover the mouse over a specific device. Click the update icon that appears to edit the selected device. This will open the Update Device window where you can edit the device. You can edit the Device Type, Device IP Address, Display Name, and Monitor Interval.

• Navigate to Configuration > Manage Devices.
• Hover the mouse over a specific device. Click the Configure Event Source Files icon that appears.
• This will open the Event source file discovery window, where you can select and configure the type of event source file.

Note: The registry is accessed for configuring event source files. Modifications to a registry entry will reflect only when reloaded. This feature supports Windows XP Prod and above.

All Devices
All the devices added to EventLog Analyzer for monitoring are displayed with severity-wise summary, total event counts, log access status, last time log collected, and the device group to which the device belongs. In the drop-down menu, the domains are listed followed by the workgroups. 

In the table you can view:

• Event Count: By clicking on the Show Details link, you can view the number of error, failure, warning, and other events. 
• Last Message Time: Clicking the Last 10 Events link will allow you to the last 10 events from the specific device. 
• Next Scan On: Shows when the next scan is scheduled. The Scan Now link will scan the device instantly. 
• Log Collection Status: Status of log collection, whether it is a success or not. 
• Monitoring Interval: The period for the collection of logs. 
• Last Event Collected on: Shows when the last log message was collected.

Configuring Auto Log Forward 

Once you have added a Unix device, you will be prompted with the link to Configure Auto Log Forwarding. You can update this by selecting a Unix device in the Device Management page and clicking on Configure Auto Log Forwarding.

1. Enter the root login credentials for the Unix device. 
2. Specify the Syslog Port number. Note that the default port numbers are 513 and 514 for UDP and 514 for TCP.
3. Select the protocol - TCP/UDP.
4. Specify the SSH Port number.
5. Click Verify & Update to enable automatic log forwarding.