I guess, you are trying to configure the ELM to collect RAW logs - is it true?
If yes - you should configure "Storage polls" and click "Logging" option in the device source configuration. Then the RAW logs will be forwarded from the ERC to the ELM - but please be patient - it is not a real time process.
If you need more help regarding this configuration, I can prepare more detailed info.
Your elm screenshot shows you have configured a storage device but not a storage pool
You need to use the bottom part of the screen to set up your pool as well, using the defined storage device.
I has question :
1.ELM default is archive log local? to search at ELM Search has archive log at external log device ?
2. When archive log at external log device, is it automatic get log from local(ELM local) to external log device ? default how it get log from local (ELM local) to external log device ?
1 of 1 people found this helpful
I'm not sure I get your questions...
but basically, by default, ELM logs to whatever pool you have configured for your data source.
So your ELM could have a few devices (SAN, local), and a few polls (Pool 1 - 1 year retention), (Pool 2 - 1 month retention) on either local or remote storage.
You can specify to what pool your data source logs by clicking Logging on its configuration page. You need to do this step for ELM to work.
Next, logs on the receiver are sent to the ELM on a per-data-source basis every 12 hours, or every 5 megabytes - unless this changed (I think it may actually be 4 hours now... not sure!)
@athena : thanks very much
i has question:
Log format of ELM is ? mean: with data source have syslog different so ELM has general type log format ?