cancel
Showing results for 
Search instead for 
Did you mean: 
lichnt
Level 7
Report Inappropriate Content
Message 1 of 7

Archive Logs via CIFS

I tried use CIFS to archive logs at windows 2k3 , i see logs at windows 2k3 but i search logs it is error:

01.png

02.png

6 Replies
artek
Level 11
Report Inappropriate Content
Message 2 of 7

Re: Archive Logs via CIFS

Hi,

I guess, you are trying to configure the ELM to collect RAW logs - is it true?

If yes - you should configure "Storage polls" and click "Logging" option in the device source configuration. Then the RAW logs will be forwarded from the ERC to the ELM - but please be patient - it is not a real time process.

If you need more help regarding this configuration, I can prepare more detailed info.

Regards,

Artur

lichnt
Level 7
Report Inappropriate Content
Message 3 of 7

Re: Archive Logs via CIFS

Hi artek ,

I want locate log of all the data source via other ELM ,

At ELM i config " storage pools" (i testing at VMware so i cant add SAN) but when i choose at logging i see it ...

01.png

02.png

Can you help me,

i want storage log of all the data source with other ELM local and when i search log

Re: Archive Logs via CIFS

Your elm screenshot shows you have configured a storage device but not a storage pool

You need to use the bottom part of the screen to set up your pool as well, using the defined storage device.

lichnt
Level 7
Report Inappropriate Content
Message 5 of 7

Re: Archive Logs via CIFS

I has question :

1.ELM default is archive log local? to search at ELM Search has archive log at external log device ?

2. When archive log at external log device, is it automatic get log from local(ELM local) to external log device ? default how it get log from local (ELM local) to external log device ?

Re: Archive Logs via CIFS

I'm not sure I get your questions...

but basically, by default, ELM logs to whatever pool you have configured for your data source.

So your ELM could have a few devices (SAN, local), and a few polls (Pool 1 - 1 year retention), (Pool 2 - 1 month retention) on either local or remote storage.

You can specify to what pool your data source logs by clicking Logging on its configuration page. You need to do this step for ELM to work.

Next, logs on the receiver are sent to the ELM on a per-data-source basis every 12 hours, or every 5 megabytes - unless this changed (I think it may actually be 4 hours now... not sure!)

lichnt
Level 7
Report Inappropriate Content
Message 7 of 7

Re: Archive Logs via CIFS

@athena : thanks very much

i has question:

Log format of ELM is ? mean: with data source have syslog different so ELM has general type log format ?