Submit a ticketCall us

Looking to compare latest NPM features with previous versions of NPM?
The NPM new feature summary offers a comparison of new features and improvements offered with this release.

 

 

 

 

Home > Success Center > Log & Event Manager (LEM) > SolarWinds LEM 6.3 User Guide > Monitor view in the LEM console > LEM Events

LEM Events

Created by Caroline Juszczak, last modified by Caroline Juszczak on Sep 06, 2016

Views: 439 Votes: 0 Revisions: 5

Events are messages created from agent, manager, and network device log entries. These log entries are processed (or normalized) to extract information and display the data in a common table format instead of the often convoluted format you see in the source data. These normalized events are sent from the agent to the manager for processing. At the manager, the events are processed against your rules, sent to your database for archiving, and sent to the LEM console for monitoring.

When you click a filter in the Filters pane, inbound traffic is channeled through the filter and displayed in the events pane. You can pause the incoming event stream, sort and highlight the data, and respond to events with a corrective action. When completed, you can resume the incoming traffic that appears in the events grid.

Click the video File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/050/040/Button_videoCamera_18x12.png icon to view a tutorial on using the Monitor view and nDepth to see all events from a single IP address or host name.

Apply a filter to the events grid

  1. Open the Monitor view.
  2. In the Filters pane, maximize a category group.
  3. Click the filter you want to apply to the events grid.

    The events grid title bar displays the name of your selected filter, and the grid refreshed to display incoming events that match the conditions of your filter.

LEM saves event filters on the workstation running the LEM console. If you move to another workstation, you can export the filters to your new workstation and import them into the console.

Sort the events grid

You can sort the events in the events grid by clicking the appropriate column header. For example, if you click the Event Name column header, the grid sorts the filtered events by event name in ascending order. If you click the column header again, the events are sorted in descending order.

  1. On the events grid toolbar, click Pause.
  2. Click the appropriate column header to sort your filtered events.
  3. When completed, click Resume to continue receiving filtered traffic.

Highlight events

In the Monitor view events grid, you can highlight events to call attention to them or mark them for future reference. This allows the events to really stand out as you scroll through the contents of the grid. You can highlight multiple events at the same time. You can also choose the color you want for each set of events you are highlighting.

  1. Open the Monitor view.
  2. In the Filters pane, select a filter from a filter group.
  3. On the events toolbar, click Pause to temporarily stop all incoming events.

    Pausing incoming events is not required, but it places all events in static mode for review.

  4. In the events grid, click the events you want to highlight.

    Press <Ctrl> to select two or more events.

  5. On the events grid toolbar, click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/050/040/HighlightSelectedRows_21x13.png to highlight a row with selected color or enter hexadecimal value.

    The events appear in your selected color.

    File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/050/040/HighlightedRows.png

  6. Click Resume to resume the incoming web traffic.

Disable highlighted events

  1. On the events grid toolbar, click Pause to temporarily stop all incoming events.
  2. In the events grid, select the appropriate events to disable the highlight.

    Press <Ctrl> to select multiple events.

  3. On the events grid toolbar, click the File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/050/040/HighlightSelectedRows_21x13.png drop-down menu and select No Color.
  4. Click Resume to resume all incoming events.

Copy event data to the clipboard

Copy event data for single or multiple events from the Monitor view events grid or Event Details pane to your clipboard. This allows you to paste the data into another application (such as Microsoft Excel for comparison or analysis), share the data with someone who does not have a console, or send to SolarWinds for technical support.

  1. Open the Monitor view.
  2. In the Filters pane, select a filter from a filter group.
  3. In the events grid, select the event you want to copy.

    Press <Ctrl> to select two or more events.

  4. In the events grid, click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/050/040/Button-Gear(Gray)_18x15.png and select Copy.

    The event data is now copied to your clipboard (as text).

Tag events as Read or Unread

You can mark events in event filter as unread and read. This process allows you to track examined and unexamined events.

The grid refreshes based on your selection.

  1. Open the Monitor view.
  2. In the Filters pane, select a filter from a filter group.

    The events grid displays your selected filter.

  3. In the events grid, select the events you want to mark as read or unread.
  4. Press <Ctrl> to select two or more events.
  5. In the events grid, click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/050/040/Button-Gear(Gray)_18x15.png and select one of the following options:
    • Mark Unread. Identifies one or more selected events as unread in bold text. Any events captured by other filters appear as unread in those filters as well.
    • Mark Read. Identifies one or more selected events as read in non-bold text.
    • Mark All Unread. Identifies all events as read in bold text.
    • Mark All Read. Identifies all events as read in non-bold text.

Remove events

You can remove one or all events from a filter. This allows you to clean a filter of historical information that is no longer important.

  1. Open the Monitor view.
  2. In the Filters pane, select a filter from a filter group.
  3. In the events grid, select the events you want to remove.

    Press <Ctrl> to select two or more events.

  4. In the events grid, click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/050/040/Button-Gear(Gray)_18x15.png and select Remove to remove your events.

    Select Remove All to remove all events.

    The selected events are removed from the grid.

 
Last modified
13:35, 6 Sep 2016

Tags

Classifications

Public