Submit a ticketCall us

Systems Monitoring for Dummies
Our new eBook will teach you the fundamentals and help you create monitors and alerts that are effective, meaningful, and actionable. Monitoring is more than a checkbox on your to-do list. This free eBook will give you practical advice to help you succeed in all aspects of monitoring – discovery, alerting, remediation, and troubleshooting. Don’t miss out on this indispensable resource for newbies, experienced IT pros, and everyone in between. Register Now.

Home > Success Center > Server & Application Monitor (SAM) > SAM 6.5 Administrator Guide > Manage processes, services, tasks, and events in real time > Real Time Event Viewer

Real Time Event Viewer

Updated: 3-9-2017

View Windows event logs in real-time using the WMI protocol with the Real-Time Event Viewer (RTEV). Event logs can be filtered by log type, event source, and the level of severity.
The viewer allows you to:

  • Start monitoring selected real-time Windows event log entries
  • Pause and restart polling
  • Login to the selected server with different credentials

You may need to log in with an administrator account to perform this action.

Pop-ups must be enabled for the RTEV to be viewed.

Access the Real-Time Event Log Viewer

  1. On the Orion Web Console, select My Dashboards > Applications > SAM Summary.
  2. Select an application from the All Applications resource.
  3. Select Real-Time Event Log Viewer from the Management resource.

The Real-Time Event Log Viewer opens with a filterable list of all events and logs.

File:Success_Center/Reusable_content_-_InfoDev/SAM_Admin_Guide_Reuse/SAM-Admin-MT/0H0/0I0/wilbur-rtev_557x194.png

Filter Real-Time Events

After the events of the selected Log Type are collected and displayed in the window on the right, you can filter the results with various criteria.

  1. Select an option from the log type drop-down menu:
  2. Select Custom Sources from the Event Sources drop-down menu. Select only the sources you want to keep when the filter is applied, as highlighted:
  3. Select the type of messages you want the filter to keep by selecting the Event Level.
  4. Click Apply Filter to have the events filtered and displayed.

After filtering is complete, hide and unhide the filtering pane on the left by clicking either of the two arrows, highlighted in red:

The display window shows a list of the most recent events. Should any new events occur while this window is open, a green bar at the top of the window indicates that new events have arrived. Click the green bar to add these new events to the display window.

The Level column icons correspond to the Event Level icons in the legend of the events pane.

Clicking any message in the display window brings up a message box providing the entire message along with additional details.

Monitor events

You can monitor selected events from the Real-Time Event Log Viewer by selecting an event and creating a component monitor:

  1. Select an event and click Start Monitoring in the Message Details view.
    The Add Component Monitor wizard opens with the selection.
  2. Modify the Component Monitor based on the application you selected, following the wizard steps.
    For details, see Create component monitors from the Component Monitor Wizard.
  3. After you begin the Component Monitor Wizard, use the option to Disable Keyword Matching. The Include Events drop-down menu provides options to help you filter results.
  4. Save and assign the component monitor.
 
Last modified

Tags

Classifications

Public