Change Auditor 7.5 - User Guide

View and save agent trace logs

View and save agent trace logs

To view Change Auditor logs (Statistics page):

1	Open the Statistics page and select Logs | Open Log.

2	On the Open Log File dialog, use the controls at the top of the dialog to locate the Change Auditor log to view. Select the log file and click Open.

This opens a new page in the client which displays the log entries for the selected log.

3	Whenever an entry is highlighted in the top pane, the corresponding details are displayed in the Event Details pane across the bottom of the screen.

4	Use the tool bar buttons to search the log for a specific entry, to copy and paste the contents of this log for use in another application, and print or save the contents of this log.

To save Change Auditor logs to a specific location (Agent Statistics page):

1	Open the Agent Statistics page.

2	Select one or more agents from the list and select Logs | Get All Logs.

3	On the Browse for Folder dialog, select the location to save the logs for the selected agents. Click OK to save your selection.

NOTE: If necessary, select Make New Folder to create a new folder for these logs.

To view Agent logs (Agent Statistics page):

1	Open the Agent Statistics page.

2	Select one or more agents from the list and select Logs | View Agent Log.

3	This opens a new page in the client which displays the selected agent’s log (ChangeAuditor.AgentLog.nptlog). If multiple agents are selected, multiple log pages are created.

4	Whenever an entry is highlighted in the top pane, the corresponding details are displayed in the Event Details pane across the bottom of the screen.

In addition, when an error is highlighted in the top pane and there is a call stack available for that error, an Exception pane will also be displayed.

5	Use the tool bar buttons to search the log for a specific entry, to copy and paste the contents of this log for use in another application, and to print or save the contents of this log.

To view Agent logs (agent system tray icon):

NOTE: The agent system tray icon is only available for server agents.

1	On the server where the agent is installed, right-click the agent system tray icon and select View Agent Logs.

2	This opens the log viewer allowing you to review the events recorded in the selected agent’s log (ChangeAuditor.AgentLog.nptlog).

Coordinator Statistics and Logs

Coordinator Statistics and Logs

•	Introduction

•	Coordinator Statistics page

•	Coordinator system tray icon

•	View coordinator status and statistics

•	Manage Change Auditor coordinators

•	Coordinator Log page

•	View and save coordinator trace logs

Introduction

Introduction

In addition to the overview information provided in the Coordinator Status pane on the Overview page, you can obtain coordinator status and statistics through the following options:

•	The Coordinator Statistics page which provides a global view of all installed coordinators, including the current status and other usage statistics for each coordinator.

•	The Change Auditor Coordinator Status dialog, which is accessed using the coordinator system tray icon, provides the status and usage statistics for a single coordinator.

You can also view or retrieve coordinator trace logs from the Coordinator Statistics page or by using the coordinator system tray icon.

Coordinator Statistics page

Coordinator Statistics page

Use the View | Statistics | Coordinator menu command to display the Coordinator Statistics page, which provides a global view of all installed coordinators, including the current status of the coordinators.

The Coordinator Statistics page may contain the following information for each coordinator. The following table identifies the fields that are displayed by default. To display different fields, click the Field Chooser button located to the far left of the column headings and select the required columns:

 

NOTE: All dates and times are based on the client’s current local date and time. The format used to display the date and time is determined by the local computer’s regional and language setting.

Table 1. Coordinator Statistics page: Field descriptions

Column	Default	Description
Agents Connected	Yes	Displays the number of agents to which this coordinator is connected.
Alerts Last 24 Hours	No	Displays the number of alerted event entries in the last 24 hours of the coordinator operation. The value in this field is a hypertext link and when selected displays the alerts generated in the last 24 hours.
Alerts Last Hour	No	Displays the number of alerted event entries in the last 60 minutes. The value in this field is a hypertext link and when selected displays the alerts generated in the last 60 minutes.
Alerts Today	Yes	Displays the number of alerted event entries since local midnight today. The value in this field is a hypertext link and when selected displays the alerts generated since local midnight today.
Alerts Total	No	Displays the number of alerted events found in the coordinator database. The value is this field is a hypertext link and when selected displays the alerts in the coordinator database.
Alerts Yesterday	No	Displays the number of alerted event entries from local midnight today to local midnight yesterday. The value in this field is a hypertext link and when selected displays the alerts generated yesterday.
Architecture	No	Displays whether the coordinator is installed in a 32-bit (x86) or 64-bit (x64) environment.
Client Port	Yes	Displays the port number assigned to the coordinator Service Connection Point (SCP).
Coordinator	Yes	Displays the computer name of the coordinator.
Coordinator FQDN	No	Displays the fully qualified domain name of the coordinator.
Coordinator ID	Yes	Displays the ID of the coordinator that processed the event.
DB Catalog	Yes	Displays the name assigned to the coordinator database during the coordinator installation.
DB Instance	No	Displays the name of the SQL instance that is being used for the coordinator database.
DB Size	Yes	Displays the size of the coordinator database, in kilobytes.
Domain	Yes	Displays the name of the domain where the coordinator is located.
Events Last 24 Hours	No	Displays the number of event entries received from all agents in the last 24 hours of coordinator operation. The value in this field is a hypertext link and when selected launches a quick search to display the events generated in the last 24 hours.
Events Last Hour	No	Displays the number of event entries received in the last 60 minutes of the coordinator operation. The value in this field is a hypertext link and when selected launches a quick search to display the events generated in the last 60 minutes.
Events Today	Yes	Displays the number of events encountered since 12:00 a.m. of the current day (based on the relative coordinator computer's time). The value in this field is a hypertext link and when selected launches a quick search to display the events generated today.
Events Total	No	Displays the number of entries found in the coordinator events database. The value in this field is a hypertext link and when selected launches a quick search to display all events encountered since the agent was started.
Events Yesterday	No	Displays the number of events encountered between 12:00 a.m. yesterday and 12:00 a.m. of the current day (based on the relative coordinator computer's time). The value in this field is a hypertext link and when selected launches a quick search to display the events generated yesterday.
Forest	No	Displays the name of the forest where the coordinator resides.
Startup Time	No	Displays the date and time when the coordinator was last initialized.
Status	Yes	Displays the current status of the coordinator: • running • initializing • stopped • failed
Uptime	Yes	Displays how long the coordinator has been running.
Version	Yes	Displays the current coordinator version installed on the server.