Home
Event24x7 User Manual
Contents
1. Event24x7 User Manual Version 8 1 05 8 580 Wizard Eventa 4x7 Pre Defined Solitons Session Connection Parameters Interface Settings Login Session Type Windows Platform i Agent via TCPIP Seton Tie Mace Ti Distributed NEW DES UW E I mam am am ma pm nw a T a Select the session connection parameters for the new DES Type DES and session you added Press Next to continue Event24x7 User Manual Version 8 1 05 8 581 event 24x7 8 4 2 Wizard step 2 Select Solution Wirard Event 4x7 Pre Defined Solitons ne PjeZzIM suonnjos Pauljaq ad EY SNMPBandwidthUtilization Bandwidth Utilization Using SNMP EJ SNMPJVM E SNMPFrinter E SNMP System SQL database You have to select the solution you want to install Press the Next button to continue Event24x7 User Manual Version 8 1 05 8 582 event 24x7 Wizard Event24x7 Pre Detined solutions nn Step 2 Select Solution PAEZIM Select monitoring activity Select the appropriate option bellow SUON OS payag ad C Delete all monitonng objects for the Gic Only if you select the last option as indicated above and then press Next you will move on to step 3 on the next page Otherwise you will skip this step and move on directly to the final step which is Wizard Approval Event24x7 User Manual Version 8 1 05 8 583 event 24x7 8 4 3 Wizard step 3
2. Select Solution Event24x7 User Manual Version 8 1 05 8 575 vent 24x7 8 4 1 2 New Session Wizard Event24x7 Pre Detined solutions Step 1 Select Session Choose session option Select the appropriate session option bellow O Existing Session New Windows008 Select computer from the Network Please note that Like define default connectivity options t doesnt effect the Fre Define solutions In this case you have to specify the new session name The Like Session parameter gives the new session the connectivity attributes of the specified session You can use the Select computer from the Network option Press the Next Button and you will stay in the 1 step but with the following screen Event24x7 User Manual Version 8 1 05 8 576 PjeZIM SUNN OS pauyag ad event 24x7 8 4 1 2 1 Select DES type You have two options e Select an existing DES type If you select an existing one you must select from the combo box the DES type you prefer either LOCAL DES or REMOTE DES e Creating anew DES type 8 4 1 2 1 1 Existing DES type Wizard event 4x7 Pre Detined solutions PJEZIM The Distributed Event Server DES has similar functionalities as CES it reduces the load from the Central Event Server CES by handling the session s traffic perfonns initial rule processing and message suonnjos pauyag aq Select the appropriate DES option bellow Press Next to
3. This statement first reads the parameter s threshold 1 It takes the value of the Field and the value of the severe threshold It checks the relation between those two fields with the defined Relation If the condition is met it assigns the state Severe to the parameter 2 If the first check failed it takes the value of the Field and the value of the Error threshold It checks the relation between these two fields with the defined Relation If the condition is met it assigns the ERROR state to this parameter 3 If the first check failed again it makes this comparison again see section 2 but with the Warning threshold Event24x7 User Manual Version 8 1 05 6 460 event 24x7 6 9 4 14 PRM Threshold Differential Parameter Threshold Differential Single Parameter O Group of Parameters Sort List Sorted Operation Last Checks C Last Minutes Check Defined Threshold Duyratior Compare Field Field from the Create Tab like Value Name or user Purpose Set the Parameter s state according to the Parameter s threshold Fields Compare Field The Parameter s field name that contains the value to be compared with the threshold The fields are created at the Create Tab Relation The mathematical relation Duration Duration of time can be set in number of minutes or number of checks Details This statement simplifies the use of a threshold This statement is similar to the PRM Threshol
4. pO Measurement Bytes unita Bring the file size Measurement unit is one of the following Bytes Kilobyte KB Megabyte MB Gigabyte GB Event24x7 User Manual Version 8 1 05 6 388 event 24x7 6 5 4 1 14 HTTP Check if URL is accessed HTTP Type Internal WinHttp URL http username passworda server port Mot Found Type URL Proxy Not Found Strings List Event24x7 User Manual Version 8 1 05 Available options Internal WinHttp Event24x7 perform GET and POST commands internally External WGet exe Event24x7 executes the WGet utility All the WGet options are available URL to check or the command line for WGet Optional Not Found string that is returned from the web server It enables Event24x7 to indicate a Not Found page Optional List of strings to locate in the return answer from the web server If this option is used the last line of the intermediate file returned from the collector contains an indication if all strings were found List line has the format of gt gt Result OK Size 1 6 389 event 24x7 6 5 4 1 15 Performance Monitor Performance Monitor Object Instance Computer o Cycles Wait mS ect Counter list TK Counter Helper Dialog Perform perfmon counter Event24x7 User Manual Version 8 1 05 6 390 event 24x7 6 5 4 1 16 Ping DOS Ping C Ultimate Ping Wing TraceRoute Ultimate
5. Order Disable Session Process on CES Hame No Type ry Yes Statistics Created 2002 11 29 06 31 Changed 2007710721 09 39 By EVENT Name Unique identifier of a rule Group Group name of the rule Description User s description of the rule This specifies the rule target and any other information relating to the rule Used for documentation Session Type The session s type that the rule applies to Available options e ALL meaning any session type e A specific type from the session type list Event24x7 User Manual Version 8 1 05 4 162 Process on CES Priority Don t order this element Search Created Changed event 24x7 Relevant to rules running on the Des Events coming to DES by default are not sent to CES for rule processing for better performance With this option you can force the DES to forward messages that are triggered by this rule to the CES server for further processing Rule priority from O lowest to 100 highest When several rules are triggered by an incoming message they are executed according to their priorities from the highest to the lowest Select this option if you do not want this rule to be triggered By default this checkbox is not set How to continue searching for other rules to be triggered after the first one is triggered Available options Stop On First When the first rule is triggered stop the search Do not search for other rules Stop On Priori
6. Purpose Fields Type URL Proxy Not Found String list Identify Keep Temp file Event24x7 User Manual Version 8 1 05 Check availability of URL Object type Choose one from the list Internal WinHttp External WGet exe URL address to check Proxy server to be used Not Find string String list to look for on URL page Identify string to intercept the result at the Exception pane Tick this checkbox if you want to keep the temporary files 4 280 event 24x7 4 6 12 IB Memory IB Meron Memory size in Mega bytes Purpose Check various Memory statuses Fields Type Memory check type Choose one from the list 0 memory utilization 0 100 1 Total size in bytes of physical memory 2 Size in bytes of physical memory available 3 Total possible size in bytes of the paging file 4 Size in bytes of space available in the paging file 5 Total size in bytes of the user mode portion of the virtual address space of the calling process 6 Size in bytes of unreserved and uncommitted memory in the user mode portion of the virtual address space of the calling process Details The result of the check returns as follow RC O0 Operation failed 1 Operation succeed VALUE If operation succeeded the result of the check Example Memory Memory utilization IF VALUE gt 80 THEN Message Warning Memory reached 80 THEN END Event24x7 User Manual Version 8 1 05 4 281
7. Runtime Parameters Wirard Event24x7 Pre Defined Solitons ni Step 3 Runtime Parameters Define the Monitor runtime parameters val 5 5s i coon POU TO Po ee oor suognjos PAUYA Add pesenane a a a This screen is optional and appears only when the defined solution uses run time parameters When defining the Oracle solution for example you must specify the Oracle s connection parameters Press Next to continue Event24x7 User Manual Version 8 1 05 8 584 event 24x7 8 4 4 Wizard Approval Wizard Event24x7 Pre Detined solutions nn The Wizard has all the required information for applying the changes PAeZIM Press Next for Approval Press Cancel to leave without applying the changes Press Back for moving backward suonnjos pauag ad The Wizard has all the information to apply the changes You have to approve the operation Type Next for applying the changes and you will get the final confirmation screen below Event24x7 User Manual Version 8 1 05 8 585 rard Event24x7 Pre benned solitons Wizard finished successfully the activity PAPZIM Press Back for start a new action SUIOINJOS pauyag add Click Finish to End Event24x7 User Manual Version 8 1 05 8 586 8 5 Deployment Center Enable installation of remote DESs RESs and 3 party applications as well as performing maintenance for the existing DESs and RESs Put the Deployment files at the Deployment folder beneat
8. event 24x7 9 2 1 General Tab User Hame arty Group yten First Hame Middle Hame Last Name Address Address Remarks Enable C Disable Status User Name Recipient unique identifier Group Group name of recipients First Name Recipient s first name Middle Name Recipient s middle name Last Name Recipient s last name Employee Number Recipient s employee number Address 1 Recipient s address 1 Address 2 Recipient s address 2 Remarks General remarks Status Enable or Disable this recipient Event24x7 User Manual Version 8 1 05 9 612 event 24x7 The Addresses tab is used to define recipient s Email and SMS details barpigmall corn E mail CC E O OOOOOOOOOOOOOOOOOOOOOOOOOOOOO Cellular 97201234567 Email Recipient s email address Email2 CC Recipient s second email address for CC SMS by Email The email address for SMS by Email service provider Cellular Recipient s cellular number Phone Recipient s phone number Event24x7 User Manual Version 8 1 05 9 613 event 24x7 9 2 3 No SMS Tab The No SMS tab is used to define the times during the week on which the Event24x7 system will not send emails and SMS to the recipients for broadcasting mode only oo Email Recipient s email address Email2 CC Recipient s second email address for CC SMS by Email The email address for SMS by Email service provider Cellular Recipient s cellular number
9. means any characters and means a single character Starting column The searched string must start from this position Ending column Attribute of the message Available options Any Normal High Intensity 6 421 event 24x7 Case Whether the search is sensitive to upper and lower case Exclude List A list of strings that must be ignored 1 e if a written block containing the string above is found it should be also checked for the strings in this list If at least one of them is also found in the written block then the block should be ignored Details A written block is intercepted only when a specific string appears inside this block and other strings 1f they exist in the Exclude List do not appear Please note that using the Wildcard search overrides the use of Columns and Case sensitive Event24x7 User Manual Version 8 1 05 6 422 event 24x7 6 6 4 6 User Experience User Expenence Purpose Intercepts a specific User Experience output file after each User Experience cycle Fields Name The name of the User Experience Definition object Details User Experience enables an Interceptor to be triggered by the output of a specific User Experience object based on its name Event24x7 User Manual Version 8 1 05 6 423 event 24x7 6 7 File Watch Definition The File Watch object s main responsibility 1s to track a list of user log files or event viewer logs for any new written information Her
10. 309 event 24x7 4 8 9 Play PLAY Filename INVALID OR Purpose Play a voice file Fields File Name Name of wav or vox file to be played Details Example Play announcement wav Event24x7 User Manual Version 8 1 05 4 310 event 24x7 4 8 10 Record RECORD File Marne aap OARD Masiniurn time i seconds Wi File Format Oyos Purpose Record a voice file Fields File Name File to be recorded Maximum time Maximum time in seconds allowed for recording File Format A radio button either wav or vox Details Example Record special_announcment wav Maximum time 60 File Format wav Event24x7 User Manual Version 8 1 05 4 311 event 24x7 4 8 11 Sleep SLEEP Purpose Pause time in seconds Fields Seconds Number of seconds to sleep Details Example Sleep 60 Event24x7 User Manual Version 8 1 05 4 312 event 24x7 4 8 12 Speak SPEAR K Sap POLLAR DOWN D10 Purpose Text to be read out spoken Fields Say Text Details Reads a written text out load Example Say Good Morning Event24x7 User Manual Version 8 1 05 4 313 event 24x7 4 9 MIB definition MIB Definition allows defining a SNMP MIB structure Event24x7 is capable of getting SNMP traps in general and SNMP MIB traps in particular A MIB Trap packet contains series of numbers that represent content The MIB structure is the dictionary that helps translate the number into meaningful text Event24x7 MIB contains the M
11. According to highest State Sane ee E cher Before minutes Leave Blank for none Default State Parameter s default state State OK By default every check is displayed at the dashboard This checkbox allows suppressing the display in the OK state and showing only the error situations Automatic Alerts amp Emails Handle Alerts Alerts can be served as a tool to notify when a parameter s state is changed and it is not in the OK state You can do it manually with Action Alert or by ticking this field s checkbox to let Event24x7 know that it must alert us whenever the state is changed Handle Emails Like Alerts above send an email automatically whenever the parameter s state was changed Auto Text For automatic alert set the alert s Message For the Email it is the email s subject Event24x7 User Manual Version 8 1 05 6 439 CVeENT 24x7 Mail To Target mail address and type Mailing List Automatic Notification Handle Use Notification Center to send an email or SMS Notification automatically whenever the parameter s state was changed Broadcasting Send the email or SMS in broadcast mode don t wait for acknowledgement Group Select the Group of recipients to send the notifications to Sending Send notifications using Group defaults or by overriding from here Notify Select notification method using Group defaults or by overriding from here Force Action Control the Action part behavior B
12. Event24x7 User Manual Version 8 1 05 9 621 event 24x7 The Recipients tab allows you to select the recipients to be included in the group from the entire recipient list and to define the sending order inside the group Recipient List Brod Recipient List The entire recipient list Selected Recipients Selected recipients for the group Event24x7 User Manual Version 8 1 05 9 622 event 24x7 9 3 6 Weekly The Weekly tab is used to define Recipients according to weekly calendar Setting recipient Open meeting with duration as the recipient s duty Meeting subject should be recipient name When setting secondary recipient number the recipient name according to the order Setting recipient at all day duty Event24x7 User Manual Version 8 1 05 9 623 event 24x7 The On Duty tab is used to define Recipients according to days on the calendar 14 Wednesday 15 Thursday Currently not operational for future use Event24x7 User Manual Version 8 1 05 9 624 CVENT24x7 9 4 Using Notification Center Using Notification Center is possible in two ways e From Parameter Action tab 1 Available Notification Center commands Notification Center Activate the Notification Center for the current Parameter Values here override the Group definition Require Notification command at OK state also Notification Acknowledgement Acknowledgement for mail Need to define email session and set interception co
13. File Size Greater Ther oO Not exist size is 1 Count Consecutive failed to start action bellow Automatic Alerts amp Emails Handle Alerts Handle Emails Auto Test Maito Maing List Curent Server Optionally verify that the Collector s output is valid If failed Event24x7 will not perform the related parameters Skip Parameters cycle Turn on the Verify check if failed following checks File Size Greater Then Check the size of the Collector temporary file output Must Contain String Check for the appearance of a specific string in the Collector temporary file output Must Not Contain Check that a specific string is not part of the Collector String temporary file output Count Minimum number of consecutive failures that must occur in order to trigger the execution of the automatic Alerts and Emails section Event24x7 User Manual Version 8 1 05 6 410 vent 24x7 6 6 Interceptor Definition The Interceptor object executes a single command or request at the monitored environments The result of the request is kept at a temporary file and is used later by the Parameter for its own calculations or checks The main activities of an interceptor are to intercept specific strings in files SNMP strings or traps that arrive at the current session and specific Information Base Objects processes services WMI commands PerfMon objects and so forth Monitoring Denniion Session AGENTLESS Exception ER EMClar
14. Instruct collector to take values created by an external application Usually a collector performs an operation to get the object value In some cases we need to use values created by Rules with Server Parameter command Event24x7 User Manual Version 8 1 05 6 400 event 24x7 Get information from a VMware server 6 5 4 1 25 VMware ESX 6 5 4 1 25 1 List of ES Xs iM iware Type List of ES Get a list of all ESXs from a VMware vCenter Type List of ESXs Event24x7 User Manual Version 8 1 05 6 401 event 24x7 6 5 4 1 25 2 List of Guests Ai M iware Type List of Guests Get a list of all VM guests from an ESX server Type List of Guests Event24x7 User Manual Version 8 1 05 6 402 event 24x7 6 5 4 1 25 3 List of Parameters iM iware Type List of Parameters SeSS1Or Get a list of all parameters that can be queried from a VM guest Type List of Parametrers Session VM session to get the parameter s list from Event24x7 User Manual Version 8 1 05 6 403 event 24x7 6 5 4 1 25 4 Parameter Values iM iware Type Parameter Values Dezso Parameters Get parameter values from a single VM guest Parameter Values Type Session VM session to get the parameter values from Parameter Parameter s name Event24x7 User Manual Version 8 1 05 6 404 event 24x7 6 5 4 1 25 5 Parameter Top Values Top 10 iM iware Type Parameter Top Values Top 10 Session Paramet
15. Please note that running a job is done asynchronously This action might take some time In order to avoid a situation where the GUI stalls it is done asynchronously Event24x7 User Manual Version 8 1 05 15 679 24x 15 2 4 Sessions Tab When selecting the Sessions Tab similar windows will be displayed Logo fUAY PL ORACLE EE SYSTEM MULL ACTIVE YUAY PC DAACLE EXE oT STEM MULL ACTIVE YUAW PC ORACLE EE SYSTEM MULL ACTIVE YUAW PC ORACLE EE SYSTEM MULL ACTIVE UAY PL ORACLE EE Sy STEM MULL ACTIVE YUAW PC ORACLE EE SYSTEM MULL ACTIVE TOAY PC ORACLE EE SYSTEM MULL ACTIVE UAY PL ORACLE EE Sy STEM MULL ACTIVE MADARA EventStudio ese OUAY PC woaym OAVM INACTIVE 10 MAQDR W aglplusw exe TOAV PC yoavm OAV The sessions tab Shows current sessions and what they do and give you the option to kill the session 15 2 4 1 Process Operation Kill Session Selecting a session and pressing the right mouse button will open a popup window with the possible Kill the Session action Choosing this action will kill the selected Session Please note that Kill the session is done asynchronously This action might take some time In order to avoid a situation where the GUI stalls it is done asynchronously Event24x7 User Manual Version 8 1 05 15 680 event 24x7 Double click on a session entry and the SQL performance dialog will be displayed Session SOL performance Session Detail for sid 6 select local tran_i
16. Remove Term Scope Server Effective within the scope of the same server they were created on Universal Effective in the entire Event24x7 namespace Details A Term can be established as a criteria for triggering a Rule Event24x7 User Manual Version 8 1 05 4 258 event 24x7 4 3 76 Text In Screen Text in Screen Tet L Purpose Search for a specific text in the Session s terminal Fields Text Text string that you are searching for Details Use for Scripts to handle in automatic login For example you might wish to search for a requested user name before entering the user name If text is found on the screen then RC is set to 1 If it isn t found RC is set to 0 Event24x7 User Manual Version 8 1 05 4 259 event 24x7 4 3 77 User Exit User Exit E sit Humber jo Purpose Execute a DLL or a specific DLL function at this point in the Action Tab The details of this DLL or DLL function name are specified one level up in the parameter s Collector in it s Execution Tab Fields Exit Number Acts as an identification number for the executing DLL Details Event24x7 User Manual Version 8 1 05 4 260 event 24x7 4 3 8 VOICE User Exit E sit Humber jo Purpose Send a Voice Request to EventVoice for execution Fields Name Voice Definition script Type Tick this box if you wish to wait until script file execution ends before continuing Otherwise the program will be executed
17. This check verifies whether there is a process that consumes too much CPU It is used by the ConsumingProcess check from the System solutions Event24x7 User Manual Version 8 1 05 6 381 event 24x7 6 5 4 1 8 Database DATABASE Stored Procedure Map Filed name as Prefi Timeouk Leave empty for default 30 Execute request Specify request from a Database The database type is determined in the Monitor fields One of the fields is the OLADB string to open the database The output of the request has three possible formats e Fixed column width when the Fix length in table Format option is checked 1 1 2 2 e Prefix fields name when the field name as prefix option is checked FLD1 1 FLD2 1 FLD1 2 FLD2 2 e Single Blank between fields 1 objextl 2 object2 This request automatically handles fields with embedded blanks Event24x7 User Manual Version 8 1 05 6 382 CVeCNT 24x7 DES Command Execute command at current DES cmd vc copy d testfile bet c file bat Wat ait Minutes for time out Leave empty for default of one minute Performs any DOS command at the current DES server Wait field specifies the minutes Event24x7 will wait till the command ends When the wait time is exceeded Event24x7 will terminate the command Event24x7 User Manual Version 8 1 05 6 383 event 24x7 Monitor user mailbox at the Exchange Server Exchange Inbox Server Domain The Inbox fie
18. USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Part 9 SClencelogic LLC copyright notice BSD THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LUSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN TP ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Event24x7 User Manual Version 8 1 05 24 730
19. e Notification Sending Order e Wireless Modem e SMS via Mail e SMS Provider Number Recipient s number for sending the SMS Message The message that would be sent to the recipient Server The DES server that will be used to send the SMS Details The simplest way to send immediate SMS Event24x7 User Manual Version 8 1 05 6 522 event 24x7 Parse File and Set File Hame Variable for entire file Po Delirniters fs leave empty for default Variables Names Start After Purpose Convert a file to variables When the file has an internal structure of Keyword Value Keyword Value With this command you can create Event24x7 variables automatically Fields File Name File name and path to convert Variable for Variable name for the entire string in the entire file file Delimiters List of characters that are used as delimiters between the input fields Leave empty for default Variable Names The variable names Start After An Event24x7 search for the prefix and it creates a variable from the value that appears after this prefix 6 10 52 Parse Input and Set Event24x7 User Manual Version 8 1 05 6 523 event 24x7 Parse Input and Set Parameters Variables Names Start After set Parameters Single parameter Sessioni bi Parameter State OK Purpose Convert single message to parameters When the incoming message has an internal structure of Keyword Value Keyword Value With this command you
20. s value is not lost upon restart of the Event24x7 Application Details Add a User Variable and set it s value If the variable doesn t exist Event24x7 will add it If it already exists a new value is set When a Global variable is set the variable can be viewed from the Variable Status screen See Special Variables and Variables Status sections Example For cases that a counter is required To increase such a counter the user must enter the following data in the screen above Name COUNTER Value 1COUNTER 1 Scope Local The Name field doesn t contain the sign Event24x7 knows that it s related to User Variables The Value field must contain the 1 to tell Event24x7 to take the current value of the Local User Variable COUNTER and increase it by one Event24x7 User Manual Version 8 1 05 6 541 event 24x7 6 10 69 Set Parameter Set Parameter Directly Parameter name State Purpose Send Value directly to Parameter It is used with a Collector that is defined as Disable When This disables the parameter from being performed every cyclic interval but only when the monitor containing this action is triggered It means that the Collector doesn t collect data The parameter retrieves data from an external source this monitor or another parameter This statement sends a direct value to the Parameter The Parameter isn t initiated by the Collector but only upon the arrival of this command Fi
21. Action Position Method File Watch Event24x7 User Manual Version 8 1 05 Folder s full path File s prefix name Report on files for which this Prefix is part of their name This is an optional field File Extension Report on files with this extension only Start or Stop the file watch activity When starting the File watch from where to start reporting Start of File or End of File How to perform the File watch internally Should this file be part of the File Watch facility 4 291 event 24x7 4 6 22 IB User Log Watch IB User Log Watch Positiors Method J Continue monitoring even if file doesn t exist File Watch 0 Send to CES O Send to CES Flle Watch C Dont Send to CES Purpose Perform User Log Watch Send new file records to Rule system and Focal Point Fields Name File full name and path Select Identify Identify the string that will be sent to the Focal Point whenever a new file record is inserted into the specified log Action Start or Stop the file watch activity Position When starting the File watch from where to start reporting Start of File or End of File Method How to perform the File watch internally File Should this file be part of the File Watch facility Watch Event24x7 User Manual Version 8 1 05 4 292 event 24x7 46 23 IB WMI Command IB Wh Command Name Space Authenticatia Identify x Create output file for debug Pu
22. All available actions are explained in section 6 10 The Escalation Tab may contain any number of action commands Execution of the commands is done sequentially from the first to the last Using Event24x7 Variable in Action When adding actions in Escalation Tab you can use Event24x7 System variables prefix of and global User variables prefix in the parameters See Special Variables section for more details When executing the Escalation Tab Statements it first checks whether the statement contains Event24x7 variables If it does it first changes each variable to the variable value and only then executes the action Event24x7 User Manual Version 8 1 05 9 620 event 24x7 The Expired Tab defines the action s command that should be taken when reaching Expired state Operation Details All available actions are explained in section 6 10 The Expired Tab may contain any number of action commands Execution of the commands is done sequentially from the first to the last Using Event24x7 Variable in Action When adding actions in Expired Tab you can use Event24x7 System variables prefix of and global User variables prefix in the parameters See Special Variables section for more details When executing the Expired Tab Statements it first checks whether the statement contains Event24x7 variables If it does it first changes each variable to the variable value and only then executes the action
23. CVCNT24x7 4 6 13 IB NT Log Watch IE NT Log Watch Log Type vere ema Selection Type None Don t check bi ww O File watch Send to CES Dont Send to CES 0 Send to CES Flle Watch Purpose Monitor one of the NT Log files Fields Type Message to send Choose Log file from the list User Event File You Enter the file name Application Security System Directory Service DNS Server File Replication Service Case Whether the search is sensitive to upper case or lower case letters Type Search only logs of this type for the above string Possible types are None Don t Check Error Warning Information Failure and Success Source Search for a specific Source from the header Category Search for a specific Category Event ID Search for a specific Event ID You can specify up to three Event IDs in a single request Details The command instructs the RES smart agent to monitor a specific NT Log file Event24x7 User Manual Version 8 1 05 4 282 event 24x7 As aresult every record written to the monitored NT Log file is automatically sent also to the Event24x7 rule system Besides displaying the record at the Session Terminal console and the Focal Point it is also passed through the Event24x7 rule system Important In cases where single selection is not enough you can define multiple IB NT Log Watch statements with different selection Event24x7 User Manual Version 8 1 05 4
24. Cybersource None SalesForce Event24x7 User Manual Version 8 1 05 3 94 3 6 Credential Table The Credential Table defines login credentials in a centered location These credentials can be used easily inside the login tab in each session configuration The Credential also used by the Discovery process The Discovery try to perform login to investigated sessions by each one of defined credentials security DeTniLon Group Windows CSecurityTable Administrator SNMP a Windows E Administrator Name Administrator ae Description F Group YM Windows Community Username Miy pc administrator Statistics Created 2011407403 21 06 Changed 2011 407 09 21 06 EVENT af New Delete ta Apply Group Define the credential type Available Groups e SNMP e SSH UNIX Linux e WMI Event24x7 User Manual Version 8 1 05 3 95 eve e WMI for Windows workgroup 3 7 Downtime Define Downtime for Sessions and Monitors for a period of time on which no collector will be active and no parameter will be performed The Downtime operation allows you to set in advance the date and time on which all monitoring for a specific session of even a specific monitor of a session will be disabled for a period of time It allows you to select the sessions and monitors that will be included in this downtime It can also send an automatic email on the start and end of downtime as well as an email for notification
25. Group by Sessions Report Open Problems All Report Services state Details List of Parameters that use Exceptions List of Event24x7 Pro Active activities List of CES execution threads List of DES execution threads Downtime Event24x7 User Manual Version 8 1 05 5 327 event 24x7 Note An important feature has been added for the Report s option which is to auto refresh the Open Problem s types This can be done via the Rules Definitions by defining a new rule of type event which will be executed every cyclic interval say 5 minutes and is responsible to auto refresh the displayed open problem s report web page The action tab of this rule should be set as seen below Repot Operation Details Report Repot Open Problems All 7 Perform Send report to open Studio Open Don t forget to select one of the first two options specified on the page above in Event24x7 under Operation gt Reports List before activating this rule Event24x7 User Manual Version 8 1 05 5 328 vent 24x7 5 1 1 Downtime Down one criteria Date From 0572672014 Date To 05262014 bi l 0 Same as Date Criteria Duration C Customize Planned lable Planned All Values Enitity Planned Service Un Planned ard Party Sevirity Environment Type Purpose Create a report of Downtime Events Fields Date From Start date and time Date To End date and time Select Table Select table from P
26. If the expression is FALSE the first statement after the WHILE END clause 1s executed next Details Add the following two lines to the actions command WHILE expression WHILE END You can add action statements between the WHILE and WHILE END lines and they will be executed only when the WHILE expression is TRUE Event24x7 User Manual Version 8 1 05 6 556 event 24x7 6 11 Mouse right button Select a line from the action list and press the right mouse button key A popup menu will be displayed Copy Copy All Execute Immediately That performs the following Copy Copy the select line into the memory If the selected line is part of a clause command like IF THEN ELSE WHILE etc the whole clause command will be read into the memory Copy All Copy all the lines into the memory Execute Execute the current action tab Immediately Usually the action tab is executed only when it is active and the state of the parameter was changed to the state of the current tab This option forces Event24x7 to execute this Action immediately as though it s state was changed This let you check the outcome of the Action part Event24x7 User Manual Version 8 1 05 6 557 event 24x7 7 Diagrams Diagram is the highest layer display view which looks down on all others It contains state of the art Visio like graphic user interface to display the network in a graphical way Event24x7 take the various activities of its
27. Increase by Value Increase by Percentage Decrease by Value Decrease by Percentage Compare The Threshold value Value Duration Define in the dimensions of time and by which scale Minutes or Number of previous checks At least How many times the condition should be met to consider it as enough Details e Single value Check that CPU is more than 80 during the last two minutes Event24x7 User Manual Version 8 1 05 6 448 event 24x7 e Group Like in the example above find all the processes that are consuming more than 40 over the last five minutes Event24x7 User Manual Version 8 1 05 6 449 event 24x7 There are no parameters for this statement 6 9 4 4 PRM Force Action When the new Parameter s state is similar to the previous one state was not changed as a result of the last Collector run the Action statements for the state will not be executed Action statements are executed only when the state was changed The PRM Force Action changes the default behavior and forces execution of the Action statements even if the state remains the same as the previous one Event24x7 User Manual Version 8 1 05 6 450 event 24x7 Parameter List of Values Parameter Name N ame Case Sensitive 0 Insensitive Tome Hames List of Values Missing State E rror Estra State Warming Send group to Parameter Purpose Enables automatic checking for fixed values or occurrences For example verify that there
28. MIBs List Selected MIBs AGILENT Clarion Dominion s MS5 4 000 Netraz40 MICE Port Terminal Size 24x 80 MIB Specify Event24x7 s Defined MIBs When Event24x7 receives traps that are MIB defined it displays the meaning of the traps in addition to the OIDs Port Default SNMP Port number is 162 Terminal Size Screen size rows by columns Event24x7 User Manual Version 8 1 05 3 62 event 24x7 Perform automatic Login to the session connected to Event24x7 Some operating systems require the user to perform a Login in order to gain authorization for their access 3 1 3 2 3 Login Interface Settings Login Login Script Authorization Credential Login Script Login script name The script should be defined in the Script Definition screen Script Parameters Pass parameters to the Login script at execution time One of the usages is to hide the password Instead of hard coding the password in the script pass it as a parameter LOGINPASWORD for example is Event24x7 system variable that takes the password from below and passes it to the script In the script in order to get a specific parameter use the syntax of 4WORDn where n is 1 2 n for selected position User Name User Name that performs Login In the case of domain controller connection use domain name as part of the user name For example if the target domain name is EX1 The User name should be EX1 administrator Even
29. Minutes to wait between retries Remarks General remarks Event24x7 User Manual Version 8 1 05 9 617 event 24x7 9 3 2 Properties The Properties tab is used to define the Escalation and Expired states It is also used to define notification of a higher level manager about the status of the alert and the actions made so far by the Event24x7 system Escalation Count Recipient failure Minutes from starting Notify Notify cycle in Minutes To Mailing List Sever Current Server Expired Expiered in Minutes Escalation Count Recipient Number of unresponsive recipients before failure entering Escalation state Minutes from Number of minutes before entering Escalation starting state Notify Notify cycle in The number of minutes between sending a minutes notification to the higher level manager Mail To Set the recipient mail address Mailing List Set this field to send the mail to a mailing list Event24x7 User Manual Version 8 1 05 9 618 event 24x7 In this case the Mail To field points to a Mailing List that is defined at the Script definition Mail Server The mail server name Expired Expired in minutes Number of minutes before entering Expired State Event24x7 User Manual Version 8 1 05 9 619 event 24x7 The Escalation Tab defines the action s command that should be taken when reaching Escalation state B Escalation P Expr S Recents Ewes Pon Duty Operation Details
30. P State Purpose Send Value directly to Parameter It is used with a Collector that is defined as Disable When This disables the parameter from being performed every cyclic interval but only when the rule containing this action is triggered It means that the Collector doesn t collect data The parameter retrieves data from an external source this rule or another parameter This statement sends a direct value to the Parameter The Parameter isn t initiated by the Collector but only upon the arrival of this command Fields Session Name Parameter Name Value Name State User Parameters Event24x7 User Manual Version 8 1 05 The Parameter s Session name Name of the Parameter The Parameter s Value The Name field of the value Set the Parameter s state It can set itin advance to OK Warning Error or Severe It can be set to Use Parameter State Tab and then the parameter itself will set the state according to the State Evaluation Can pass user arguments as input to the parameter It can be used at the Parameter s side as 4 WORD 1 4WORD2 etc 4 248 event 24x7 SET String String Manipulation Hame Source Type From qo Start with zero Length Evaluate Value 0 Local SCOPE 7 Server O Universal Purpose String Manipulation It takes an existing Event24x7 variable System or User as input and lets you create a new variable by applying string
31. event 24x7 46 8 IB Existence IB EKSISTENCE Purpose Check existence of objects Fields Name Object name to check Type Object type Choose one from the list Process Service File Directory Details If checked and object exists RC is set to 1 If checked and object doesn t exist RC is set to 0 For Directory type it returns the number of files in the specified directory Event24x7 User Manual Version 8 1 05 4 277 event 24x7 4 6 9 IB Handling Directory IB Handling Directory Directos Type Directory Exist 1 if doesn t exist gt Purpose Handle a directory Fields Directory Directory s name Type Object type Choose one from the list Directory Exist Directory Creation Time Directory Last Access Time Count Files in Directory The Recently Updated File Details Perform checks on a directory Event24x7 User Manual Version 8 1 05 4 278 event 24x7 4 6 10 IB Handling File IB Handling File fle Pattern File Name i pattern Type File Slze 1 if doesn t exist h Purpose Handle a file Fields File File s name Pattern Check 1f file name is a pattern Type Object type Choose one from the list File Size Created Date Last Access Details Perform checks on a file Event24x7 User Manual Version 8 1 05 4 279 event 24x7 4 6 11 IE HTTP Tepe Internal WinHttp UAL Mot Found IB HTTP http usermame passworda server Provy ident lt Keep Temp file
32. from the skeleton You can update only a single object or the entire skeleton and send the changes to all of the sessions The skeleton s definition window is identical to the Monitoring Definition window of any session Skeleton Detiniton Pro Active Monitor System ER System H H AvailablemBytes ConsumingProcesses H cpu H FreeSpacell E HTTP H MemoryUtilization H PerfMon I Ping E PortsTCP E Process H Service 7 E SMARTPredictedFailure Enable Status H Uptime L Disable i Statistics WebAcc as Beled 2011 07 16 17 53 Changed 2011 07 1617 53 By FROM SKELETON spuewwog Description con H H E E Event24x7 User Manual Version 8 1 05 10 629 Target Skeleton and Sessions event 24x7 Right click on one of the tree objects will open the following local menu Copy Adjust Sessions current Pane Paste Target Skeleton Copy with associates Paste from Parameter Target Skeleton and Sessions Adjust Sessions current Pane Target Skeleton Affects only the skeleton Target Skeleton and Sessions Affects both the Skeleton and the sessions Adjust Sessions current Pane Copy Copy with associates Paste Paste from parameter Rename Rename Update Delete Event24x7 User Manual Version 8 1 05 Copy a single object Copy an object with its associates Paste an object with without its associates Paste an object copied from a p
33. list Server Event24x7 s server that will send the mail Details Event24x7 User Manual Version 8 1 05 6 528 event 24x7 6 10 57 PROGRAM PROGRAM Type Serial wait till end walt Minutes for time out Purpose Run a program on a specific server Fields Name Name and path of the program Parameters Run time parameters for the program Directory Directory path Type Tick this box if you wish to wait until file execution ends before continuing Otherwise program will execute in parallel to other operations Wait When executing in Serial mode allow time in minutes for program execution to end Server The server upon which the program will be executed Available options Current Server CES Server LOCAL DES and REMOTE DES Details There are no specific rules how to use Name Parameters and Directory It is similar to using Win32 API CreateProcess Example Run program check_instant_messages Type serial Wait 2 minutes Event24x7 User Manual Version 8 1 05 6 529 event 24x7 6 10 58 Program As User Program 43 User Account Program Parameters Director PO ou Profile Proxy Use Gateway Server for 2008 Server Curent Server h Purpose Run a program under a specific user credentials When a program must be started with a certain user credentials like a program that reads from SQL and the SQL authentication is Login User Fields Program Parameters Directory User Pa
34. machine However the Information Base IB is executed at the remote machine where an Event24x7 RES Smart Agent is running When the IB 1s activated the Event24x7 server sends the IB to the RES In the RES it is scheduled for running For explanation on the General and When tabs refer to General Tab and When Tab sections in the Rule definition chapter Event24x7 User Manual Version 8 1 05 4 265 event 24x7 4 5 1 Action Tab for Information Base Action Tab defines the action commands to execute Send Event to Server Operation Details DISK Space Total space Command Total Space on C is p ALUE Server Com Total Space on C is V48LUE DISK Space Free space on drive Server Com Free SPace on C VA LUE C eyer A pull down menu allows for a selection of actions many of which are the same as those in the Rule Action section Activate IB Activate Information Base at a remote session Activate Rule Activate a rule or group at Event24x7 s server Activate Workflow Activate a Workflow Alert Open a new Alert at the alert windows Backup Backup the whole monitoring solution on the RES Beep Generate a Beep sound Case Add an CASE line to the SELECT statement Command Issue a command to the session Command DOS Issue a DOS command Command PsExec Issue a PSExec command on remote computer Command Special Send special character keys to a session Enter Tab Reset home New line CTM Condition
35. mn Downtime Detniton Group DT Downtime Excp4 SpueWwWOS oY x Description Order Disable Type Planned Unplanned Statue Completed Time and Date Stark 2370172011 7 00 11 End 2370172011 j O0 Statistics Created 2011 01 24 00 09 Changed 2011 01 23 18 53 By EVENT New Ei Delete zl Apply For more information on Downtime please refer to Downtime Event24x7 User Manual Version 8 1 05 3 96 event 24x7 3 8 Server Configuration The Server Configuration screen enables setting some of the Central Event Server CES parameters 4 Common Properties arameters Security Site Name TriggerPlus Database Site URL www Tiggerplus com Discovery Date Type MM DDAYYYY USA Working Hours Debug Level Error y General Backup Directory Notification Properties aaa Number of Rule s check 20 CES Log roll over size G 0 Rule Status Interactively No Do it manually Alert automatic dosing No Change status to Close Disable Close Reopen Alert option No Allow Number of saved Alert History Appearances 3 Open Problems refresh in seconds 60 x Cancel 3 8 1 General Tab Site Name Enter the name of the organization that uses Event24x7 The Site Name will display also at the Event24x7 WEB part Site URL The WEB site URL Date Type Set the date representation which determines how the date will be displayed Debug Level In Event24x7 important messages are written to a log file located at lt installation
36. set of Control Key commands Session The session to which the command is sent to Choose a session from the session list Details The special command can t be sent by the ACTION COMMAND Note The Command Special command can also be added in the Monitoring Definition Parameter s State Tab with the same effect Event24x7 User Manual Version 8 1 05 4 194 event 24x7 4 3 15 CTM Condition Control M Condition Acton Condition Hame ODAT CTM Server Purpose Operations on prerequisite conditions in the CONTROL M Server database Fields Action Add or Delete operations Condition Condition Name Name CTM Server Address of CONTROL M Agent Details Activate ctmcontb utility Event24x7 User Manual Version 8 1 05 4 195 event 24x7 4 3 16 CTM Jobs Control M Jobs Scheduling table Jobrarne Force ODAT CTh Server Purpose orders or forces one or more jobs from a Scheduling table in the CONTROL M Server database Fields Scheduling Scheduling Table name table Jobname Job name or mask of the job s to order or force Force Force or Order option ODAT The current working date of the computer on which CONTROL M Server is running CTM Server Address of CONTROL M Agent Details Activate ctmorder utility Event24x7 User Manual Version 8 1 05 4 196 event 24x7 4 3 17 CTM Loads set Control M Load set C Total Others CTM Server Lo Load Type Purpose The ctmloads
37. 05 4 251 event 24x7 SMS Wireless Message Type Serial wait till erd Purpose Send SMS via cellular modem Fields Number Sender Message SMS message body Script Event24x7 script that defines the protocol Event24x7 should use in order to send the SMS Session Event24x7 Session name for the cellular modem Type Option of serial sending the SMS In this way it is possible to check the return code for success Details The advantage of using a cellular modem is by the fact that it doesn t need internet to send the SMS It is based upon a cellular modem that is connected to Event24x7 via a serial connection You have first to define the Serial session in Event24x7 that connects to the cellular modem and then define the script that tells Event24x7 the AT commands required to handle the SMS Please look at the Siemens script that defines how to use a Siemens MC45 cellular modem Event24x7 User Manual Version 8 1 05 4 252 event 24x7 4 3 70 SNMP MIB Interactive SNMP Get Set Type Get Taat Community Por Leave empty for default a Purpose Get or Set SNMP mib object Fields Type Type of request Get or Set Target IP address of the target Community Port Port number Default port number is 162 OID Object Identifier of Get or Set Details Event24x7 User Manual Version 8 1 05 4 253 event 24x7 4 3 71 SNMP Mib Trap SAMP Trap according ta MIB Target Poort Leave empty for defaul
38. 1 Difference between date and current date Structure of the function name 4 characters DIFF l character IIUIE date format International USA or East l character DIHIMIS return measurement Days Hours Minutes Seconds l character 2 optional for extended date format 17 3 1 2 Difference between two dates Structure of the function name 4 characters DIF2 l character IIUIE date format International USA or East l character DIHIMIS return measurement Days Hours Minutes Seconds l character 2 optional for extended date format Event24x7 User Manual Version 8 1 05 17 699 event 24x7 Similar to the above date there is support for a UNIX date with the format of Oct 11 14 47 17 3 1 3 UNIX date support Structure of the function name 4 characters DIFF l character X UNIX date format l character HIMIS return measurement Hours Minutes Seconds For retrieving the difference between two dates use the following Structure of the function name 4 characters DIF2 l character X UNIX date format l character HIMIS return measurement Hours Minutes Seconds Event24x7 User Manual Version 8 1 05 17 700 event 24x7 17 3 1 4 Old functions DIFFDDMMYYYY DIFFDDMMYYYY2 DIFFMMDDYYYY DIFFMMDDYYYY2 For example For example DIFFY YY YMMDD DIFFY YY YMMDD2 Date format For example Date format For example DIFFWMI Date format For example Date format For example Date format Fo
39. 14 Line structure Time Thread ID and the message itself When checking the audit log file look for ERROR or WARNING strings Event24x7 User Manual Version 8 1 05 22 25 event 24x7 23 Event24x7 Web Interface 23 1 Web Interface Requirements Event24x7 Web Interface requires the following to be installed 1 ILS Make sure that Static Content is installed Windows Features Turn Windows features on or off To turn a feature on select its check box To turn a feature off clear its check box A filled box means that only part of the feature is turned on E cge Internet Information Services m E FTP Server m E Web Management Tools o il World Wide Web Services im Application Development Features il Common HTTP Features ae Default Document ae Directory Browsing m MMH Diagnostics m il Performance Features m Security m Internet Information Services Hostable Web Core e Media Features Ez im Microsoft NET Framework 3 5 1 E3 m Microsoft Message Queue MSMO Server m Eli Drint and Darimnant Sanrirar x 2 Microsoft NET Framework 4 5 e http sdrv ms 1dPJs5b 3 Web Deploy e x86 http sdrv ms lef31Gq e x64 http sdrv ms l1dPJc6p Event24x7 User Manual Version 8 1 05 23 26 event 24x7 e Should be installed on each DES server Installation file is located in Program Files x86 Event24x7 Tools MS Chart Controls MSChart exe 23 2 Web Application Installation
40. 24x7 17 1 1 User variables from Session Definition These are User free variables that optionally can be defined at the Session Definition and can be used at any place in the Parameter s Definition SESSIONUSRI User field 1 SESSIONUSR2 User field 2 SESSIONUSR3 User field 3 SESSIONUSR4 User field 4 17 1 2 User variables For Informing Tab These are variable that can be used only at the Session s Informing tab SESSIONSTATUS Returns sesNotActive or sesActive DESSTATUS Returns desNotActive or desActive Event24x7 User Manual Version 8 1 05 17 697 event 24x7 17 2 Parameter s latest value You can access any defined parameter s latest value from any session by the following parameter function lt session name gt lt parameter name gt for example lt AGENTLESS gt lt SIZE_C gt You can use this function in the SET command or any other statements Event24x7 User Manual Version 8 1 05 17 698 event 24x7 17 3 System Function A System Function has the format of FunctionName lt parameters 1 gt lt parameters n gt Please note that a function has parameters single or more that are taken from the line after the function name 17 3 1 Date Functions The Date functions retrieve the difference between two dates There are three date formats o International DDMMYYYY or extended DD MM Y YY Y o USA MMDDYYYY or extended MM DD Y Y YY o East YYYYMMDD or extended Y Y Y Y MM DD 17 3 1
41. 24x7 3 4 9 Sessions Tab Sessions tab defines sessions that can be viewed by users that belong to this profile All Sessions Sessions List Selected Sessions AGENTLESS LIN Lt REMOTEUNT SAM P TCPIP UNIS UserE xpenence Two options available to select sessions e All Sessions Authorize the profile to view all the sessions currently defined in Event24x7 When choosing this option all the other fields in this tab become gray and can t be set e Choose sessions manually Select desired sessions from the Sessions List and move them to the Selected Sessions list The action is done with the direction arrows gt gt gt and lt lt lt buttons You can select multiple sessions in each transfer You can select multiple sessions in each transfer Only the sessions that are selected will be seen by users that have this profile All messages coming to CES Central Event Server will continue to pass through the Event24x7 Rule system Event24x7 User Manual Version 8 1 05 3 93 event 24x7 3 5 Tables The Tables defines the options that are available for use in the Details Tab of the Downtime definition In each table you specify values to be used in the relevant selection field inside the Downtime definition Available tables are Services Entity 38 Party Severity Environment Type and Machine Type services Entitiy 3rd Party Severity Environment Type Machine Type Downtime table oro Party 2s RB OAS
42. 24x7 3 4 Profile Configuration The User s profile defines a set of permissions for a user All aspects of the Event24x7 system activities are controlled by the Profiles A Profile determines whether the user has authorization for full control may only view or has no permission even to view it Profiles Configuration ADMINISTRATOR a System Administrator Description Full Authorization os mo es 55 O Vu m5 Delete De Event24x7 User Manual Version 8 1 05 3 84 event 24x7 3 4 1 General Tab Profle Mame ADMINISTRATOR A Sp tem Administrator Description Full Authorization Profile Name Unique identifier of a profile such as a job title Description A detailed description of the defined profile Event24x7 User Manual Version 8 1 05 3 85 event 24x7 3 4 2 Configuration Tab i None View All Profile Setup C None View All Credential 0 None View All Server Setup None View All The Configuration Tab defines security levels for the items found in the Configuration part of the local Studio screen including DES and Session Service User Setup Profile Setup Organization Structure and Server Setup The definitions affect only the local Studio in which it is defined Permissions may be None View only or All permission to view and modify Event24x7 User Manual Version 8 1 05 3 86 94 Statuses Rules Permission 0 None vie
43. 283 CVCNT24x7 4 6 14 IB Performance Monitor IB Performance Monitor Cycles Wait mS ec Helper Dialog Purpose Retrieves values from the Windows Performance Monitor Fields Object Performance monitor variable For the Counter correct value open the performance Instance monitor and take the values from there Computer Computer name when required remote value For local computer leave it blank Cycles Number of times to perform rechecks in order to ensure that the result is as precise as possible Wait Time to wait in milliseconds after each check before conducting a recheck Details Retrieves performance Monitor values Has similar values as the ones you get by running the Windows Performance monitor Type perfmon from the command line You can press the Helper Dialog button too to assist you in selecting the exact checks to perform from the perfMon Event24x7 User Manual Version 8 1 05 4 284 event 24x7 4 6 15 IB Performance VB Script IB Performance Monitor via YB Script Cass FO Obest Instance Computer Leave empty for local Purpose Retrieves values from the Windows Performance Monitor via VB Script Fields Class Class Name Object Performance monitor variable For the correct value open the performance monitor and take the values from there Instance Instance Name Computer Computer name when required remote value For local computer leave it blank Details Retrieves performance
44. 46 3 IB Command IB Command dent Session AGENT x Purpose Perform a command on local computer Fields Command The command to perform Identify Identify the string that will be sent to the Focal Point Session The session to perform the IB command on Event24x7 User Manual Version 8 1 05 4 272 event 24x7 4 6 4 IB Consuming Processes IE Consuming Processes Purpose Check for CPU consuming processes on local computer Event24x7 User Manual Version 8 1 05 4 273 event 24x7 46 5 IB Database IE Database ODBC Mame Map Style Single Blank between fiel Test Connection Stored Procedure Connection General Using DSH hi User Name Password Identify Create output file for debug Purpose Perform database queries on local computer Fields ODBC Name ODBC Name You have to define ODBC connection from ODBC Data Source Administrator Map Style Format of the results Test Relates to the Connection Pool handling Connection Only the StatusDB command should have this field checked Stored Check this field if you activate Stored Procedure Procedure User Name User Name for authentication Password Password for authentication Identify Identify string to intercept the result at the Exception pane Create output file for debug Event24x7 User Manual Version 8 1 05 4 274 event 24x7 IE DEBUG Level Debug Level jo Purpose Create Information Base local log file or set the de
45. 6 10 81 6 10 82 6 10 83 CVeENT 24x7 SEND VALUE SERVER COMMAND SERVER PARAMETER SESSION SET SET PARAMETER SET STRING SLEEP SMS SMS WIRELESS SNMP MIB INTERACTIVE SNMP MIB TRAP SNMP SEND TRAP TABLE TALK TCPIP TERMS TEXT IN SCREEN USER EXIT VOICE WHILE 6 11 MOUSE RIGHT BUTTON That performs the following 7 DIAGRAMS 7 1 DIAGRAM DEFINITION 7 1 1 TOOLS TO CREATE DIAGRAMS 7 1 1 1 Edit Control 7 1 1 2 Tool bars 7 1 1 3 Main Menu 7 1 2 LINK BETWEEN SHAPE AND COMPUTER 7 1 2 1 Link shape to a Session 7 1 2 2 Link shape to a Service 7 1 2 3 Use of the Map Control 7 2 DIAGRAM RUNTIME 7 2 1 SELECTING A RUNTIME DIAGRAM 7 2 2 USING RUNTIME DIAGRAM 7 2 2 1 Display Shape 7 2 2 2 Quick Summary 7 2 2 3 Drill Down 8 MANAGEMENT 8 1 BACKUP 8 2 IMPORT 8 2 1 IMPORT PARAMETERS Event24x7 User Manual Version 8 1 05 1 14 6 536 6 537 6 538 6 539 6 540 6 542 6 543 6 545 6 545 6 546 6 547 6 548 6 549 6 550 6 551 6 552 6 553 6 554 6 555 6 556 6 557 6 55 7 7 558 7 558 7 559 T 50 T9550 7 560 7 561 7 561 7 562 7 563 7 564 7 564 7 565 7 565 7 565 7 566 8 567 8 567 8 568 8 569 CVECNTI4Lx7 8 2 1 1 Performing an Import Operation 8 2 2 IMPORT SKELETON 8 2 2 1 Performing an Import Operation 8 3 RESTORE FROM BACKUP 8 4 INSTALLING PRE DEFINED SOLUTIONS 8 4 1 WIZARD STEP 1 SELECT SESSION
46. 8 1 05 4 115 event 24x7 4 1 4 Activities 4 1 4 1 Files amp Folders 4 1 4 1 1 Get File Query Purpose Get file attributes Fields Type File Exist File Size Creation Date Last Modified Date Last Access Date File Full path and file name Results Set SUCCESS for File Exist 4 1 4 1 2 Get File Time Different Purpose Get file difference Fields File Full path and file name Requested Different from current in seconds Result Different from current in minutes Different from current in hours Different from current in days Compare Creation Date Date Type Last Modified Date Last Access Date Event24x7 User Manual Version 8 1 05 4 116 event 24x7 4 1 4 1 3 Set File Action Purpose Fields Results Perform an action on a file Requested Result Source File Set SUCCESS 4 1 4 1 4 Get Folder Query Purpose Fields Results Read Delete Copy Rename Full path and file name Perform an action on a folder Type Folder Folder Exist Creation Date Last Modified Date Last File Access Date Count Files Latest File Access Full path and folder name Set SUCCESS for Folder Exist Event24x7 User Manual Version 8 1 05 4 117 event 24x7 4 1 4 1 5 File Excel Action C etrean Purpose Handle Excel File Fields Requested Read Read the entire Excel file into Result the csResult for line processing Delete Copy Rename Source File Full path and file name Has
47. ACTIVATE WORKFLOW 4 3 5 ALERT 4 3 6 BACKUP 4 3 7 BEEP 4 3 8 CASE 4 3 9 CHECK THRESHOLDS 4 3 10 CLEAR TEXT 4 3 11 COMMAND 4 3 12 COMMAND DOS 4 3 13 COMMAND PSEXEC Event24x7 User Manual Version 8 1 05 4 147 4 148 4 148 4 150 4 151 4 151 4 152 4 153 4 154 4 154 4 154 4 155 4 155 4 155 4 156 4 156 4 156 4 157 4 158 4 160 4 161 4 162 4 164 4 165 4 16 7 4 168 4 169 4 170 4 171 4 173 4 174 4 176 4 177 4 178 4 181 4 181 4 182 4 183 4 184 4 185 4 186 4 187 4 188 4 189 4 190 4 191 4 192 4 193 4 3 14 4 3 15 4 3 16 4 3 17 4 3 18 4 3 19 4 3 20 4 3 21 4 3 22 4 3 23 4 3 24 4 53 25 4 3 26 4 3 27 4 3 28 4 3 29 4 3 30 43 31 4 3 32 A335 4 3 34 45 32 4 3 36 sor 4 3 38 4 3 39 4 3 40 4 3 41 4 3 42 4 3 43 4 3 44 4 3 45 4 3 46 4 3 47 4 3 48 4 3 49 4 3 50 4 3 51 4 3 52 4 3 53 4 3 54 4 3 55 4 3 56 4 3 57 4 3 58 4 3 29 4 3 60 4 3 61 eveni COMMAND SPECIAL CTM CONDITION CTM JOBS CTM LOADS SET CTM RESOURCE CTM SHOUT DATABASE COMMAND FREE DISPLAY ELSE ELSE OBJECT ELSE PARSER EXIT RULE FILE COPY TO SERVER FORCE EXECUTION HTTP IB APPLICATION LOG RECORD IB BOOT IB COMMAND IB PERFORMANCE IB PERFORMANCE VB SCRIPT IB PROCESS IB RESOURCES IB SERVICE IF IF OBJECT IF PARSER LOG EVENT24X7 LOG USER MAIL MAIL STATUS RUN NOTIFICATION CENTER NOTIF
48. Count the number of cycles checks the parameter has the same state Count the line from the collector s output that the State tab currently evaluates Total number of lines in the collector s output Port from the Session Configuration Performance Tab User Name from the Session Configuration Performance Tab PRMPASSWORD Password from the Session Configuration Performance Tab Count the number of consecutive cycles that the parameter s state remains the same PRMINDEX PRMELEMENTS PRMPORT PRMUSERNAME PRMCOUNTINSTATE Event24x7 User Manual Version 8 1 05 16 693 event 24x7 PRMSTATEDIRECTION The direction of the current state compared to the previous check gt 0 increased severity 0 remains the same lt 0 decreased severity PRMTHRESHOLDE Returns the Threshold values for Error Severe and PRMTHRESHOLDS Warning PRMTHRESHOLDW List of all the Values Print the last parameter result PRMRESULTALL Produce a table list of the last parameter result It is designed especially for sending the result via email For example adding this variable as part of the Message part will produce a detailed list of the parameter s result Typing the following in the mail message field Result of check PRMRESULTALL Might produce the email Result of check Warning OK i OK OK OK 62 75 H PRMRESULTALLERROR Similar to PRMRESULTALL but display only objects that have not OK state elim
49. Date as 03141995 Date as 03 14 1995 Date as 19950314 Date as 1995 03 14 Month as decimal number 01 12 Full month name Year with century as a decimal number Time as hhmmss Time as hhmm Time as hh mm ss Tuesday March 14 1995 12 41 29 Tuesday March 14 1995 For Rules returns the Rule Name For Rules returns the Rule Group Name of the session the message has arrived from n 1 2 3 n Take the n th word from the input For example typing Test AAA BBB CCC From the command line WORD2 will be replaced by AAA n 1 2 3 n Take from the n th word to the end of the input 16 690 event 24x7 Event24x7 automatically prepares the following System variables when a SNMP trap arrives to a SNMP session SSH SNMP_TEXT Text only part of the trap Usually the trap contains other fields like Object s Identifier Time Ticks etc 4 SNMP_COMMUNITY The Community 4 SNMP_SENDER TCPIP address of the Trap s sender Event24x7 User Manual Version 8 1 05 16 691 event 24x7 16 3 Information Base Variables This group returns the results of the Information Base commands Each Action command that belongs to the IB xxx group checks return codes for system activities The result of the activity can be viewed and managed by these special IB variables VALUE Returns the value of the last operation RC Return code of the last activity 1 ended successfully 0 failed RC lt name gt Set of variab
50. Display a message at the Focal Point Fields Display Message to be displayed Color Message Set the color of the message text and background color Suppress message When checked the original event message would not be displayed on the Focal Point window By default every incoming event is also displayed on the Focal Point window Details This establishes the capability for the parameter to display messages on the Focal Point screen during the parameter s execution The Source column of the display message will be shown in this format Parameter followed by the Parameter name Example DISPLAY Current time is TIME Display current time on the Focal Point using Event24x7 system variable TIME Event24x7 User Manual Version 8 1 05 6 495 event 24x7 6 10 25 ELSE Purpose Fields Details Add an ELSE clause to the IF THEN clause None Two lines are added to the actions command ELSE ELSE END You can add action statements between the above lines and these statements will execute only when the IF terms have failed 6 10 26 ELSE Object Purpose Fields Details Add an ELSE Object clause to the IF Object clause None Two lines are added to the actions command ELSE Object ELSE END Object You can add action statements between the above lines and these statements will execute only when the IF terms has failed 6 10 27 ELSE Parser Purpose Fields Details Add an ELSE Parser clause to the IF
51. EMC 1 Internal Session status i Active Probe_6 _BEDOK_H Internal Session status i Active Command Rewind scrolls back on history events from set time and date Pause pause history events scrolling Forward scroll history events from set time and date and onwards Scrolling speed on the scale of 1 10 Event24x7 User Manual Version 8 1 05 5 331 vent 24x7 5 2 2 Focal Point History Timeframe User may choose date and time frame to view previous events in the history screen This allows the user to focus on a problem and to track the events that led to the problem Gee FOCAI POME i ECI AS9216 Bedok Internal Session status Probe_6 BEDOK_HM Internal Session status Probe 2 TS Slave Internal Session status i EMC 1 Internal Session status Perf Ping Probe_BP_ Perf Ping ClusterEx Perf Ping LE1 ECI_AS9216 B Internal Session status Active ECI AS9216 A Internal Session status i Active Probe 1 TS H Internal Session status Active Probe 5 ALJU Slave Internal Session status Active ECI AS9216 BP Internal Session status Active ECI_AS9216 C Internal Session status Active Probe _3_KB Internal Session status i Active Probe 7 BEDOK Slave Internal Session status Active ECI AS9216 Bedok Internal Session status i Active Probe 2 TS Slave Internal Session status i Active EMC 1 Internal Session status i Active Probe_6 _BEDOK_H Internal Session status i Active Command To select the time frame in t
52. Equal ov o Sessions V Search all the session AGENT AGENTLESS Agilent_Probe_ 192 166 100 249 Cluster Copier Cluster Correlation Purpose Perform action based upon a newly parameter s changed state Fields Name Parameter s Name State Parameter s State Available options OK Warning Error Severe and NOT OK NOT OK stands for a state other than OK Value Compare against the Parameter s recent value that caused the state to change Sessions Limit the parameter s search for specific sessions Event24x7 User Manual Version 8 1 05 4 171 event 24x7 When the Search all the session field is checked the search for the parameter will be done against all the defined sessions Details Every parameter that changed its state is sent to the rule engine for evaluation Since the Parameter rule is triggered regardless of incoming messages it doesn t depend on other What Statements When defining a Parameter statement no other type of What statement is required Event24x7 User Manual Version 8 1 05 4 172 event 24x7 4 2 4 7 SNMP Parameter Purpose Fields SNMP String Method Simple Strings Case gt Sensitive 0 Insensitive Trap components OID 1 Te be O O we Co Community OOO O Sender PO AND Perform action based upon a specific SNMP Trap that appears in the incoming message String String to search Method Method to use for finding the string e Simple string s
53. Fields 4 1 4 9 4 Send Trap Purpose Fields event 24x7 Preform SNMP Get Bulk request OID Object Identifier Community Community name Target Target IP Limit Number of lines Default is 100 Version SNMP Version 1 or 2 Send SNMP Trap Message Trap message Server Select Event24x7 Server Port Default port is 162 Version SNMP Version 1 or 2 Event24x7 User Manual Version 8 1 05 4 136 event 24x7 4 1 4 9 5 Send MIB Trap Purpose Send SNMP MIB Trap Fields Message Trap message MIB Identifier MIB name taken from MIB Definition screen Server Select Event24x7 Server Trap Number Values of the trap according to the MIB Values should be separated by commas Port Default port is 162 Event24x7 User Manual Version 8 1 05 4 137 event 24x7 4 1 4 10 Notification 4 1 4 10 1 Popup Purpose Popup a window message on the Studio Fields Message The main message to display Animation Control how the popup window appears Animation Delay Animation delay in milliseconds Show Delay Show delay in milliseconds Theme Type of popup window Transparent Transparency of the popup Event24x7 User Manual Version 8 1 05 4 138 4 1 4 10 2 Mail Purpose Send email Fields Mailing Type To CC Data Subject Message Attachment Server Event24x7 User Manual Version 8 1 05 event 24x7 Regular Address or Mailing List Event24x7 Mailing list is saved in the Script Definition For further information please refer
54. If the session is already Active do nothing If the session is not active perform Restart Session Session Name Details The Session command lets you Stop or Start a session from a Parameter the same way as you do it from the Session Definition screen Event24x7 User Manual Version 8 1 05 6 539 6 10 68 Set SET event 24x7 Evaluate Value Local C Server Scope d Universal Persistence Purpose Set value to an Event24x7 User Variable Fields Name Variable name Do not prefix the name with Value Variable value Evaluate Check this field when setting a numerical Value value It provides the possibility to set string fields Scope Variable scope Event24x7 User Manual Version 8 1 05 Local Server Local variable lives in the scope of the parameter it is executing at The moment the parameter s processing 1s terminated the variable is destroyed Local variables can t be accessed by other parameters Server Variables scope is limited to the server they were created on It can be a DES or a CES server The variable can be accessed by any parameter as long as it runs on the same server 6 540 eCVeNtT 24x7 Universal Universal Variables can be accessed by any parameter that runs on any Server in the Event24x7 cluster Persistence Guarantees that the variable s value is saved in a file every time the SET command is executed This is done to ensure that the variable
55. Monitor values via VB script Has similar values as the ones you get by running the Windows Performance monitor Type perfmon from the command line Event24x7 User Manual Version 8 1 05 4 285 event 24x7 4 6 16 IB Ping IE PING DOS Ping Wing TraceRoute Method Purpose Perform ping or traceroute from remote server Fields Method Select DOS Ping or Win32 TraceRoute Address Ping TraceRoute address Count Number of retries 1f failed Identify Identify string to intercept the result at the Exception pane Details Perform Ping or TraceRoute from remote server Event24x7 User Manual Version 8 1 05 4 286 event 24x7 4 6 17 IB Port Scan IB Port Scan Target Type TLP a Specifying Forts gt Single port to query range of 1 656535 gt List of ports to query 22 25 1612 gt Range of ports lt start end ertt keep Temp file Purpose Perform port scan Fields Target Address Name or IP of target Type Object type Available options TCP UDP Both Ports Specifying ports Single port to query range 1 65535 List of ports to query lt 22 23 161 gt Range of ports lt start end gt Identify Identify string to intercept the result at the Exception pane Details Perform ports scan using TCP UDP or both methods Event24x7 User Manual Version 8 1 05 4 287 event 24x7 4 6 18 IB Process IB Process Hame Type Purpose Check Existence Stop process or Create a new one Field
56. Name Parameter Set Hame Purpose Set the Parameter s name that will appear at the performance parameters Fields Name Parameter Name Details When opening that Parameter Dashboard window to view the performance parameters each parameter has a Name Value and State The Name command lets you set the parameter name Event24x7 User Manual Version 8 1 05 6 454 event 24x7 6 9 4 8 PRM Occurrences Parameter Qeeurences in Time Minutes Decunrences Purpose Count occurrences of parameter executions Fields Minutes Period of time in minutes Occurrences Occurrences to count State State to set if criteria are met Details Uses to count how many time log record appeared during a certain period of time For example set the parameter to Error if there were more than four log error containing the string Fatal during the last Ten minutes Event24x7 User Manual Version 8 1 05 6 455 event 24x7 6 9 4 9 PRM Quantity Parameter Quantity Field Type Name Session Field Name Relation Compare Value Logic CESS AGENTLESS State gt AND Purpose Let you set state of current Parameter according to quantities of other Parameters or User Variables Fields Field Type Parameter or Variable Name Name of the Parameter or User Variable Session Session name for Parameter Field Name Valid for Parameter Optional values e Value Parameter latest Value e State Parameter State O Ok 1 Warnin
57. Name of the user who made the last change Event24x7 User Manual Version 8 1 05 3 48 event 24x7 Connection tab define the Event24x4 connections to the manage sessions It has three pages 3 1 3 2 Connection Tab 3 1 3 2 1 Interface Session Type bl eae rece Sten Te LOCAL DES Session Type Defines the operating system of the current session Possibilities Windows UNIX Linux SNMP TCPIP Email Serial Connection and Networking Interface Define the type of interface Event24x7 uses for connecting to the session Some of the supported operating systems have several ways to connect For example Windows has four different connection types Agent less TCPIP Named Pipe and SNMP The Interface defines how event24x7 connects to the session Event24x7 User Manual Version 8 1 05 3 49 event 24x7 System Type Specify the type if Windows in case of UNIX specify the Vendor This parameter is for applying out of the box solutions by the wizards Different UNIX vendors have different solutions that match the operating system Distributed Display the DES the current session is related to Event24x7 User Manual Version 8 1 05 3 50 event 24x7 Each type of interface has different parameters to control its operations The Settings page varies according to the interface type chosen from the Interface Page 3 1 3 2 2 Settings eA eae Agent less Connection for Windows Manage Windows Operating System remotely w
58. Phone Recipient s phone number Event24x7 User Manual Version 8 1 05 9 614 nt 24x7 9 3 Group Definition Define groups of recipients to be notified in case of an alert and the method of alerting them Group Mane perators Group yetem Sending Recipient Order Working Hours Notify Order Mails and SMS NOT Working Hours Notify Order Only SMS Retries sending for Recipient Minutes to wait between retries Remarks if New es Delete ii Apply Event24x7 User Manual Version 8 1 05 9 615 event 24x7 9 3 1 General Tab Binasi Group Name Operators Group System Sending Recipient Order Working Hours Notify Order Mails and SMS NOT Working Hours Notify Order Only SMS Reties sending for Recipient Minutes to wait between reties Remarks Group Name Group unique identifier Group Group name for recipient s group definition Sending Order Define the order for sending the alerts Available options Recipient Order Send to all Simultaneously According to Weekly Calendar for future use According to On Duty Calendar Notify Order Define the notification method for sending the alerts Available options Only Mails Mails and SMS Only SMS Start mail Retries SMS Start mail Escalation SMS Event24x7 User Manual Version 8 1 05 9 616 event 24x7 Retries sending for The number of sending retries for each recipient Recipients The number of minutes to wait between retries
59. Purpose Send TCPIP packet Fields Message Message to send Host Name DNS name of target location Address IP address of target location Port Port number Type Protocol type UDP User Datagram Protocol UDP TCP Transmission Control Protocol TCP Details The UDP connectionless datagram delivery service 1s unreliable because it does not guarantee data packet delivery and no notification is sent if a packet is not delivered Also UDP does not guarantee that packets are delivered in the same order in which they were sent TCP is the default Event24x7 User Manual Version 8 1 05 6 551 event 24x7 6 10 79 Terms TERMS Date C Add Actor _ Delete scope C Universal O Server Purpose Add or Remove a Term Fields Name Term Name Date Term Date 1s in the format of MM DD This is an optional field and if it is not present it is treated as dateless Action Type of action Add Add Term Delete Remove Term Scope Server Effective within the scope of the same server they were created on Universal Effective in the entire Event24x7 namespace Details A Term can be established as a criteria for triggering a Parameter Event24x7 User Manual Version 8 1 05 6 552 event 24x7 6 10 80 Text In Screen Text in Screen Text Purpose Search for a specific text in the Session s terminal Fields Text Text string that you are searching for Details Use for Scripts to handle in automa
60. Session 4 10 2 4 Service 4 10 3 DEPENDENT 4 10 4 ACTION TABS 5 OPERATIONS 5 1 REPORTS 5 1 1 DOWNTIME 5 2 FOCAL POINT 5 2 1 FOCAL POINT HISTORY 5 2 2 FOCAL POINT HISTORY TIMEFRAME 5 3 ALERTS 5 3 1 ALERT S ATTRIBUTES 5 3 2 OPERATIONS APPLYING TO ALERTS Event24x7 User Manual Version 8 1 05 4 296 4 297 4 298 4 298 4 299 4 299 4 300 4 300 4 300 4 301 4 302 4 304 4 305 4 306 4 307 4 307 4 308 4 308 4 309 4 310 4 311 4 312 4 313 4 314 4 315 4 316 4 317 4 318 4 319 4 321 4 322 4 323 4 324 4 325 4 326 4 326 5 327 5 327 5 329 5 330 5 331 5332 5 333 5 333 5 334 event 24x7 5 3 3 USER ASSIGN PROCESS 5 3 4 TOOLBAR 5 3 5 SETUP 5 4 DASHBOARD 5 4 1 DRILL DOWN SERVICES 5 4 2 INVESTIGATE PARAMETER STATE 5 4 3 VIEW OPTIONS 5 4 3 1 Parameter Last Values 5 4 3 2 Parameter Historical values 5 4 3 3 Report 5 4 3 4 Chart 5 4 4 DEFINITION OPTIONS 5 4 5 RUNTIME OPTIONS 5 5 SESSION STATUS 5 6 RULE STATUS 5 7 IBS STATUS 5 8 TERMS STATUS 5 9 VARIABLES STATUS 5 10 VOICE STATUS 5 11 MONITORING STATUSES 5 12 DATABASE STATUS 5 13 NOTIFICATION STATUS 5 14 WORKFLOW STATUS 6 MONITORING DEFINITIONS 6 1 GENERAL 6 2 COMPONENTS RELATIONSHIP 6 2 1 INA PRO ACTIVE MONITOR 6 2 2 IN AN EXCEPTION MONITOR 6 2 3 IN A FILE WATCH MONITOR 6 2 4 IN AN IB SESSION MONITOR IB 6 3 PRO ACTIVE MONITORING DEFINI
61. Set Return Code 4 1 4 12 5 Set State 4 1 4 13 Event24x7 Event24x7 User Manual Version 8 1 05 4 122 4 122 4 123 4 124 4 125 4 126 4 126 4 127 4 127 4 128 4 128 4 129 4 129 4 129 4 129 4 130 4 130 4 131 4 131 4 132 4 132 4 133 4 133 4 134 4 135 4 135 4 135 4 136 4 136 4 137 4 138 4 138 4 139 4 140 4 141 4 141 4 142 4 143 4 143 4 143 4 144 4 144 4 144 4 145 4 145 4 146 4 146 4 147 event 24x7 4 1 4 13 1 Set Parameter 4 1 4 13 2 Session 4 1 4 13 3 Run Mail Status 4 1 4 13 4 Run Printer Status 4 1 4 14 Event24x7 IB Agent 4 1 4 14 1 IB Service 4 1 4 14 2 IB Process 4 1 4 14 3 1B Performance Monitor 4 1 4 15 Flow 4 1 4 15 1 IF Statement 4 1 4 15 2 While Statement 4 1 4 15 3 Select Statement 4 1 4 15 4 Case Statement 4 1 4 15 5 Action State 4 1 4 15 6 Exit Workflow 4 1 4 15 7 Exit While 4 1 4 15 8 Run Workflow 4 1 4 15 9 Wait 4 2 RULES DEFINITION 4 2 1 USING THE DEFINITION COMMAND BOX 4 2 2 RESERVED GROUP NAMES 4 2 3 GENERAL TAB 4 2 4 WHAT TAB 4 2 4 1 Alert Parameter 4 2 4 2 Command Parameter 4 2 4 3 Event parameter 4 2 4 4 Event Viewer 4 2 4 5 Identify Parameter 4 2 4 6 Parameter 4 2 4 7 SNMP Parameter 4 2 4 8 String Parameter 4 2 5 WHEN TAB 4 2 6 TERMS TAB 4 2 7 ACTION TAB 4 3 ACTION PARAMETERS FOR RULES 4 3 1 ACTIVATE DOWNTIME 4 3 2 ACTIVATE IB 4 3 3 ACTIVATE RULE 4 3 4
62. Started 18 20 40 Mumber of borads Found 1 18 20 40 Start Checking 4 channels 18 20 41 CWorkerThread Started For Board 1 Channel 0 18 20 41 CWorkerThread Started For Board 1 Channel 1 12042 CWorkerThread Started For Board 1 Channel 2 18 20 43 CWorkerThread Started For Board 1 Channel 3 16 20 43 DispacherThread Started 16 20 45 ConnectionThreadTCPIP Started Event24x7 User Manual Version 8 1 05 20 711 event 24x7 20 2 EventVoice Setup The EventVoice setup lets you adjust the font and the background view of the terminal and the type of connection to Event24X7 CES This is done via the Server configuration and Studio Configuration screens applicably l oice Enable Connection Type Choose Connection l TCPIP Parameters Host Mame TCPIP Address 127 0 0 1 Port 2F95 l Pipe Parameters voice Mame Pipe Suffix Voices4 Choose Connection Event24x7 User Manual Version 8 1 05 20 712 event 24x7 Direction bottom bo top Solid Color 223 35 57 coor Yiew Option Event24x7 User Manual Version 8 1 05 20 713 CVeENT 24x7 20 2 1 Background view Choose view option Choose the EventVoice background view Solid Color The background will have a solid color Gradient The background will have gradient effect Solid Color Choose the solid color The solid color will take effect only if Solid Color is chosen at Choose view option Color Choose the base color for gradient option Direction Set
63. THEN Parser clause None Two lines are added to the actions command ELSE Parser ELSE END You can add action statements between the above lines and these statements will execute only when the IF Parser terms have failed Event24x7 User Manual Version 8 1 05 6 496 event 24x7 Exchange Handle Items Operation Copy Uzer Password CO All items Target Purpose Perform an operation on your exchange mailbox 3 available options Copy incoming mailbox Inbox with part all messages to another mailbox good for backup Delete Inbox with all messages and Move inbox with messages to another mailbox Fields Operation Available options Copy Delete or Move Server Mail Server s Name used by mailbox Domain Domain name of exchange server User User name needed for logging into Password mailbox Inbox Password needed for logging into mailbox Use Items Name of mailbox you want to manipulate Which messages in the exchange mailbox to copy Delete or Move You can perform these operations with all messages or with a Target selection you make In case you selected the Copy or Move operations Details If you select the Delete operation the Target Group Box will be grayed out Event24x7 User Manual Version 8 1 05 6 497 event 24x7 6 10 29 Exit Rule Purpose Stop execution of the current Parameter Fields None Details Add the following line to the actions command When Parameter is triggered the ACTION comm
64. TraceRoute Method Address Count Packet size Timeout Seconds Check if the TCPIP address is accessible If the address in not accessible the intermediate file will be written with the line Failed in ping specified host GetLastError returns 0 If the address 1s accessible the intermediate file will be written with the line 68 142 226 42 p1 1 www re2 yahoo com replied in RTT 268ms Ping returns 0 upon success and 1 upon failure Trace Route returns the time it took the request to arrive at the target Event24x7 User Manual Version 8 1 05 6 391 event 24x7 6 5 4 1 17 Ports Scan Ports Scan Target Type TCF h Specifying Forts gt Single port to query range of 1 655351 gt List of ports to query lt 22 23 161 gt gt Range of ports lt starternd gt Check if the Ports are in the Listening mode Event24x7 User Manual Version 8 1 05 6 392 event 24x7 6 5 4 1 18 PowerShell Command by Powers hell Type PowerShell regular Perform the PowerShell support of Event24x7 The support enable perform PowerShell command to the following components Regular PowerShell commands Exchange Management 2007 Exchange Management 2010 VMware Event24x7 User Manual Version 8 1 05 6 393 event 24x7 6 5 4 1 19 SNMP Get Get specific OID value SNMP Get Taget MONITORFIELD oa Version 1 OID 1 3 6 1 2 1 1 3 0 Port Leave empty for default Get li
65. Version 8 1 05 4 220 event 24x7 4 3 41 LOG User LOG User File Purpose Create and handle a User log file for debug or control purposes Fields File Name Name of the User file Line Line to be added It can contain User or System variables Details Event24x7 will append a line to the specified file If the file doesn t exist Event24x7 will create it Event24x7 User Manual Version 8 1 05 4 221 event 24x7 MAIL Type Regular Mailing list HTML EE Data Specify Template Subject attachment Type Mone Default Image Server Current Server Purpose Send email Fields Type Regular or Mailing List Event24x7 Mailing list is saved in the Script Definition For further information please refer to the Script Definition section HTML Send mail with HTML support e The content of the Message part will be sent with HTML heading format e Anew system variable HTMLRESULTALL will print out the contents of the result similar to PRMRESULTCHECK but with table HTML format To CC BCC Email addresses Subject Email subject Message Email content Event24x7 User Manual Version 8 1 05 4 222 event 24x7 Attachment Optional attached file Server The mail server name Details Email is sent automatically In order to send mail two prerequisite terms must be set e Event24x7 must have an Internet connection e Enable Mail and the other Mail parameters must have been s
66. Weekly Calendar Recipient Order Send to all Simultaneously Notify Order Notify order Available options Use Group Default Only mails Mails and SMS Only SMS Start mail Retries SMS Start mail Escalation SMS Details Sending notifications using Notification Center Event24x7 User Manual Version 8 1 05 4 225 event 24x7 4 3 45 Notification Enable Disable Notification Enable Disable Purpose Enable or Disable Notification Center Fields State Set state for the Notification Center Options Enable or Disable Event24x7 User Manual Version 8 1 05 4 226 event 24x7 4 3 46 Notification SMS Immediate Hotification Center SMS immediate Humber Message Purpose Send immediate SMS Fields Type Options e Notification Sending Order e Wireless Modem e SMS via Mail e SMS Provider Message The message that would be sent to the recipient Server The DES server that will be used to send the SMS Details The simplest way to send immediate SMS Event24x7 User Manual Version 8 1 05 4 227 event 24x7 4 3 47 Parse File and Set Parse File and Set Varable for entire file Po Deliniters leave empty for default Variables Names Start After Purpose Convert a file to variables When the file has an internal structure of Keyword Value Keyword Value With this command you can create Event24x7 variables automatically Fields File Name File name and path to convert Variable for Variable n
67. access is done from the DES You can specify the database parameter from the CES level The database access is based upon ODBC For more information please refer to the Database Manual 3 1 2 6 Database Tab Database Use DES Database parameters from her option OSH Eventede UserName 24 Passiord Connection String Date type MS SOL getdatel Database Wee Eventide DB Keep records in exception Insert Exception Sener not ready Database Option Options e Don t use database for storing the values e Use database and take the parameters from CES e Use DES database parameters from here DSN Use as a connection to ODBC definition User Name In case the database is accessible to authorized Password personnel only Connection String Use this field for dynamic connection Specify the connection string you want Event24x7 to use Event24x7 User Manual Version 8 1 05 3 43 Date Type Database Name Keep Records in exception Insert Exception Server Not Ready event 24x7 The first field in the table is the Date field Every database system has a different built in function to create this value Specify which one you use Specify the name if USE command needs to be done before opening the table Set this field to save exception records Set this field to save records when server is not ready Event24x7 User Manual Version 8 1 05 3 44 event 24x7 3 1 2 7 Notification Tab Ev
68. and lower case Exclude List A list of strings that must be ignored 1 e if an incoming message containing the string above is found it should be also checked for the strings in this list If at least one of them is also found in this message then the message should be ignored Details What String enables a Rule to be triggered when a specific string appears in the incoming message and other strings if they exist in the Exclude List do not appear Please note that using the Wildcard search overrides the use of Columns and Case sensitive Event24x7 User Manual Version 8 1 05 4 175 event 24x7 4 2 5 When Tab The When tab defines the scheduling parameters for active rules Still in order for a rule to become effective it needs to be activated first Months i All v Jan v Feb v Mar v Apr May Jun Fifi Geshictons Jul Aug J Sep v Oct Nov Dec WeekD ays AlL F worn Tue w Wed Y Thy Fri v Sat v Sun Days 02 O03 09 10 All 716 WT 273 W 2d 30 V3 Daily Stop After Interval Delay Stark Minutes Daily Process Stop after Minutes Seconds Select any of the following months week days and days of month interval and time frame Months Specify months the rule will be active Weekdays Specify weekdays the rule will be active Days Specify days the rule will be active From Time Specify the beginning time from which the rule will be active To Time Specify the end of the t
69. and it is the activity to perform It is selected from a pull down menu with the following options User File Event Log Event24x7 User Manual Version 8 1 05 6 427 event 24x7 6 7 2 1 User File Windows User s File File Name C 4 T est file tet Pattern File Name is pattern Selection Identify file Operation cpr File Watch Send to CES l Open Viewer automatice O Dont Send to CES Purpose Track file s for any changes especially new data which is written into them Fields File Name Pattern Selection Identify Operation File Watch Event24x7 User Manual Version 8 1 05 Name and full path of windows file we must constantly check for any changes A checkbox indicating if the file name is stand alone or a substring of a longer file name that must also be checked When this flag is ticked we know our checks must be added to all files which contain this file name as part of their own name Identify string that will be sent to the Focal Point whenever a file is found 2 possible options Start and Stop The default is Start If you want to stop tracking a file choose Stop A checkbox indicating if you can see changes in the file s specified above reflected at run time in the FileWatch Control screen If ticked then yes 6 428 event 24x7 6 7 2 2 Folder Files Windows Folder s Files Prefix extension Operation Start File Watch 0 Send to CE
70. are 6 java jobs Fields Parameter Name of the parameter s field Name Case Tick sensitive if the value s upper case or lowercase values must also be taken into account Type Three types of checks e According to a list of values e Count of occurrences e Other parameters List of Values Define the values to be checked Count For checking the number of occurrences Event24x7 User Manual Version 8 1 05 6 451 event 24x7 Missing State Set the parameter s state if at least one object is missing Send to Parameter Extra State Set the parameter s state 1f there are more values than what we expected Event24x7 User Manual Version 8 1 05 6 452 event 24x7 Parameter Measure of Timeline Count Compare Field Relation Compare Value Check Defined Threshold Threshold is counters of number of times If you want to measure in Minutes you have to calculate the required counter values according to the Collector s cycle Compare Field Field from the Create Tab like Value Name or user defined field Purpose Enables comparison of fields from the Create Tab to a given value Fields Compare Name of the parameter s field Field Relation Select relation to the given value Compare The value to compare the selected field to Value Event24x7 User Manual Version 8 1 05 6 453 event 24x7 6 9 4 7 PRM
71. automator quit 28 end 29 automator wait 3000 i re automator ClickControl fromfile 1 single left click the Download Now control i the selector is taken from the ControlFile txt line 1 4 automator write_output_file clickcontrol fromfilei rc r n if rc 0 then i automator quit end 7 automator wait 3000 i re automator ClickOnText First 0 OCR single left 200 0 click on the textbox next to the word First i automator write_output file clickontext First re r n i if rc 0 then i automator quit end automator wait 1000 i automator type text Amir filling details before download 7 automator key press TAB automator wait 1000 l automator type text Egozi Press the Start Recording button and do all the actions you wish to record When done press on the Stop Recording button in the toolbar on your screen After a few seconds you will get the output of the recording a script containing all of the actions you made You can add or change actions and modify the script as you please using LUA script language and the special commands listed in section 11 5 Copy the script and paste into the Event24x7 User Experience Definition window inside the User Experience tab select schedule for rerunning the script and press the Activate button for the Event24x7 User Experience engine to start the simulation Even
72. between the THEN Object and THEN END Object lines and they will be executed only when the IF expression is TRUE Event24x7 User Manual Version 8 1 05 6 511 event 24x7 IF THEN Parser Varnables sn Walue Expressiore po Purpose Open an IF THEN Parser clause This IF clause is semi compiled for performance issues On the first pass Event24x7 compiles the statement into memory From the second pass it executes it in compiled manner This improves dramatically the performance Fields Xn Field number 1 2 Value User variable that matches the field number Expression Expression to check Details Add the following three lines to the actions command IF Parser THEN Parser THEN END Parser You can add action statements between the THEN Parser and THEN END Parser lines and they will be executed only when the IF Parser expression is TRUE Event24x7 User Manual Version 8 1 05 6 512 event 24x7 Example Suppose we need to check the following condition If 1SUM gt 197 If user variable named SUM is greater than 197 This should be written in the following syntax IF THEN Parser Varnables sn Walue 1 15UM Expressior x1 gt 197 At each cycle Event24x7 will replace x1 with the current contents of 1SUM Then it evaluates the expression Event24x7 User Manual Version 8 1 05 6 513 event 24x7 6 10 44 LOG Event24x7 LOG Internal of Event4s Tet o Purpose Write a
73. can create Event24x7 variables automatically In addition the variable can be sent to Parameters Fields Variable Names Provide the prefix and the parameter name Start After An Event24x7 search for the prefix and it creates a variable from the value that appears after this prefix Set Parameter Send the variables to Parameters Dashboard Single Parameter If checked Event24x7 will send each variable separately to the parameters Event24x7 User Manual Version 8 1 05 6 524 event 24x7 6 10 53 PING FING C ICMP Method Socket Purpose Perform Ping checks to a TCPIP address Fields Method ICMP or socket connection checks Address TCPIP address to check Format of IP is nnn nnn nnn nnn or DNS name Details Perform ICMP or socket checks for this address If there is a connection to the checked address e RC variable returns 1 e Message is written to the Event24x7 Log file containing the Hop Count The message has severity of ERROR If there 1s no connection to the checked address e RC variable returns 0 e Message is written to the Event24x7 Log file specifying the failure of the Ping command Example PING myserver IF RC 0 THEN DISPLAY Not Exist THE END Event24x7 User Manual Version 8 1 05 6 525 event 24x7 6 10 54 Play File Play File Full path of file name Server All EventStudio m Purpose Play audio file to get the operator s attention Fields Full file name to pla
74. change the default user and password The default connection parameters between the Event24x7 Central Event Server CES and the EventStudio GUI are TCPIP with 127 0 0 1 address Changing the default is done by the Setup program Event24x7 User Manual Version 8 1 05 2 31 event 24x7 2 2 Event24x7 Studio Following a successful login the Event24x7 Studio screen will open The user will be able to work on Event24x7 according to pre set permissions Actions that the user may not access will be grayed in K 7 gt al m ge Event24x7 Trial version days left 179 View Management Configuration Definitions Operation Help Terminai a G QO z Q X Gy Bs N oS y r Sl co EF g GB fe a af Rules IBs User Templates Voice MIB Services Monitoring Names Skeleton Project Workflow Diagram Define Group Definiti Definition Experience Definiti Definition Definition Definit Definiti Definition Definition Recipient Definition Responding Mode Pro active Mode Skeletons Project Workflow Diagrams Notification Center 4 User Save Operation Entrance ii Skeleton Definitions T Log Site Control l TriggerPlus Software Ready 2 3 Event24x7 Navigation There are several ways to navigate between the various Event24x7 screens e Entry Screen Select an option from the entry screen to navigate directly to the desired screen e Menu amp Toolbar Traditional Menu and Toolbar at the top of the Event24x7 scree
75. components you need As described above you can use any combination of Monitors Collectors Parameters Rules and IBs e Copy the Monitor Collectors and Parameters to the Skeleton library The skeleton library is located at lt CES installation directory gt PerformanceSkeleton e Create the control file lt Solution Name gt skl Event24x7 User Manual Version 8 1 05 18 705 event 24x7 18 3 Creating an Entry at the Skeleton Library Two steps in creating the skeleton library First you have to choose the right sub directories and then copy the files 18 3 1 Choosing the directories e First sub directory below the PerformanceSkeleton sub directory It is the Operating system of the Session Check the Session Configuration dialog at Connection gt Interface tab Look at the Session Type field It can be one of the following Linux NT UNIX e Second sub directory below the PerformanceSkeleton It is the content of the System type from the same Session configuration dialog It can be the generic entry ALL that uses as a default all the specific entries from the system type For example Windows solution can be NT ALL or NT Agent for solution that belongs to the Smart Agent RES UNIX solution can be UNIX ALL for default or UNIX HP for HP specific solution e Third level sub directory below the PerformanceSkeleton Last level that contains the solution type Can be one of the following Monitor Collector Parameter Rul
76. console Fields None Details Event24x7 Script handles automatic login script and sends wireless SMS Both scripts may use the Action Text on the Screen to search for specific text in the session s console It is sometimes required to clear the console in order to delete existing lines from previous requests This is relevant only in Linux and Unix sessions when attempting automatic login Event24x7 User Manual Version 8 1 05 6 481 event 24x7 6 10 11 Command COMMAND Command Sessions AGENT Purpose Send a command to a monitored session Fields Command The command to send Session The session to send the command to Choose a session from the session list The first entry on the session list is Current Session It sends the command to the same session that is the source of the event triggering this monitor Details Send command to the target session Event24x7 User Manual Version 8 1 05 6 482 event 24x7 6 10 12 Command DOS COMMAND for DOS Purpose Issue a DOS command on the monitored session Fields Command for DOS The command to send Details Issue a DOS command on the target session Event24x7 User Manual Version 8 1 05 6 483 event 24x7 6 10 13 Command PsExec Command by FE sec User Password Command Print command to DES log file Purpose Send a PsExec command to a monitored session Fields Type Internal or External utility User User name to be used for the comma
77. contents Line Color x Cancel Behavior Make sure that the last added line will be visible Default Color Default screen colors Font Set the font Rulers Define rules for coloring certain lines Event24x7 User Manual Version 8 1 05 15 688 event 24x7 16 Event24x7 Variables The user can define dynamic variables and can use special system variables and Functions 16 1 User Variables Event24x7 user variables have the format of n lt varname gt Where is the prefix that starts the variable n scope and search order 1 Local scope 2 Server scope 4 Universal scope lt varname gt The User Variable name Absence of the scope from the name has the same meaning as specifying Local scope 16 1 1 User Variables Resolution Search order Event24x7 allows the user to define the order in which variables will be searched and resolved This is very important since there might be variables with the same name defined in different scopes The variable COUNTER can be defined as local in some rules while in others it can be defined as Server or Universal Although all of these variables have the same name they are totally different variables with different values so it 1s important to define for the rule processor every time we use a variable which one we are referring to Definition is done by telling the rule processor the order in which it should resolve the symbols It is done by adding prefix numbers For exa
78. continue Event24x7 User Manual Version 8 1 05 8 577 event 24x7 Wirard event 4x7 Pre Defined Solitons Session Connection Parameters Interface Settings Login SUONIOS pauyag aid Session Type thee ei reface Sron Tie Distributed LOCAL DES Select the session connection parameters for the new DES and session you added Now you can skip to Wizard step 2 Select Solution Event24x7 User Manual Version 8 1 05 8 578 event 24x7 8 4 1 2 1 2 New DES type Wizard event 4x7 Pre Detined solutions PJEZIM The Distributed Event Server DES has similar functionalities as CES It reduces the load from the Central Event Server CES by handling the session s traffic perfonns initial rule processing and message Select the appropriate DES option bellow SHOWN OS Pauljar Bid O Existing DES NEW_DES On this screen you must enter the name of the new DES type you would like to create and you can create it like one of the existing DES types or as a totally new type Now press Next to continue Event24x7 User Manual Version 8 1 05 8 579 event 24x7 Wizard event 4x7 Pre Detined solutions PJEZIM DES Connection Parameters Interface SUOTIN OS PaUaq aq TCPIP 5g Secure Sockets Layer On this screen you can select either TCPIP or PIPE for the DES connection parameters Make your selection and accordingly fill in the Settings Tab Press Next to continue
79. execution of the current Rule Fields None Details Add the following line to the actions command When Rule is triggered the ACTION commands are executed one by one from the first to the last statement When during this process the Rule comes to this Exit Rule line it stops execution Note The EXIT Rule command can also be added in the Monitoring Definition State Tab with the same effect Event24x7 User Manual Version 8 1 05 4 203 event 24x7 File Copy To Server Server All EventS tudio Purpose Send file to EventStudio server Fields Source File File to Send Target File File name at Target server Server EventStudio Details Event24x7 User Manual Version 8 1 05 4 204 event 24x7 4 3 2 Force Execution Force Execution Aun Wat alt Minutes bo wat before schedule Purpose Fields Type Name Session Wait Details Event24x7 User Manual Version 8 1 05 4 205 event 24x7 4 3 28 HTTP Tope intemal WinHttp URL tte usermame password a server port Pos oo Purpose Check availability of URL mFields Type Object type Choose one from the list Internal WinHttp External WGet exe URL URL address to check Proxy Proxy server to be used Event24x7 User Manual Version 8 1 05 4 206 CVeNT 24x7 4 3 29 IB Application Log Record IE Application Lag Source Eventede Eventid 22 Type Warming ewent Text Purpose Add a record to the Application Event Viewer Fi
80. in parallel to other operations Wait When executing in Serial mode allow time in minutes for program execution to end Details Voice request might have a Return Code Special system variable RC VOICE holds the return code Event24x7 User Manual Version 8 1 05 4 261 event 24x7 4 3 9 WHILE WHILE Purpose Open a WHILE clause Fields Term Specify expression If the expression is TRUE the statements in the WHILE group are executed If the expression is FALSE the first Statement after the WHILE END clause 1s executed next Details Add the following two lines to the actions command WHILE expression WHILE END You can add action statements between the WHILE and WHILE END lines and they will be executed only when the WHILE expression is TRUE Event24x7 User Manual Version 8 1 05 4 262 event 24x7 4 4 Information Base Definition An Information Base resides on the remote machine and checks it consistently and efficiently in a proactive approach The Information Base can e Allow for local checks on the agent platform of facilities such as NT log files CPU usage memory usage hard disk space processes and services e Monitor local applications acting upon Information Base rules to keep the application on track e Support a proactive approach in which you define the steps to be taken in order to prevent problematic situations automatically The predefined Information Base defines the statuses of the
81. managing heterogeneous environments Event24x7 automatically monitors and manages the entire data center to ensure system s availability Event 24x7 main advantages v Simplicity Robust easy to use MMI Men Machine Interface Requires no programming Fill In The Blanks Approach Agent less centralize implementation SCS hS e hS SCS 2S SCS v Staging Area Unique capabilities of Root Cause Analysis and Eliminating White noises v Active Not Reactive Solves issues before they become problems Event24x7 User Manual Version 8 1 05 1 20 event 24x7 Performs remotely as local operator v Open Environment Easily Customized to customer s specific needs v Scalable Handles large number of elements and events Handles large number of rules Cluster capability v Out Of The Box pre defined solutions Numerous environments Windows Unix Linux Numerous Data bases oracle SQL MySQL Informix Numerous Network elements Switches Bridges v Service oriented architecture Business Processes Trees Dependences Trees v 3D Monitoring Architecture Vertical Axis Physical Structure Servers Networking objects Databases etc Use File Watch Manage by Exception ProActive and IB Agents monitoring methods to monitor and perform automatic actions Horizontal Axis Virtual Structure A View that contains a group of monitored objects from the physical structure Per
82. objects and the steps that should be taken in order to prevent problematic situations automatically For example IF CPU threshold is higher than 90 AND process MyServer has more than 75 open handles Action Restart service CheckHandles There are two ways to define and configure the different IBs Information Base Elements via Event24x7 as explained in sections 4 3 1 and 4 3 2 Event24x7 User Manual Version 8 1 05 4 263 441 IB General Definition The 1 way is by defining each IB that exists in the monitoring system and only then the session to which it belongs We do this by pressing the Ibs Definition button underneath the Definitions Tab which results in the following screen 118 Definition Group CHECK IB CPU CHECK E cpu HARD DISK E MEMORY H SERVICE Group HE Qa l _ Monitor memory 2 Hame H A WINDOWS Description Friority Order Disable Session Mame AGENT z Statistics Created 2004 02 28 03 43 Changed 2005 09 12 17 57 By EVENT Activate i New i Delete ii Apply Event24x7 User Manual Version 8 1 05 4 264 f spuewwon x event 24x7 4 5 Information Base amp Rules Information Base definition screen is similar to the Rules Definition screen The What and Terms tabs are not part of the IB The IB is not triggered by incoming events but starts periodically based upon timing and scheduling A rule is always executed at the Event24x7 Server CES or any DES
83. operation will be performed Please note that the Shrink operation is done asynchronously This action might take some time In order to avoid a situation where the GUI stalls it is done asynchronously Event24x7 User Manual Version 8 1 05 15 682 event 24x7 15 3 SNMP Management When starting SNMP Management the following screen will be displayed SAP Management Srimp Parameters SNMP Management manages MIB entries from any equipment that supports MIB The SNMP Management screen displays an OID by operations Walk Get or Get Next Event24x7 User Manual Version 8 1 05 15 683 event 24x7 15 3 1 Handling OIDs Type the target IP and set the complete OID or just OID prefix For example setting the OID field to 1 3 6 1 and pressing the Walk button will return the following result SNMP Management Snmp Parameters a Community public Targer Name or IP f 92 165 0 101 1 3 6 1 2 1 4 24 2 1 11 255 255 255 255 2 0 192 168 0 101 Get Next Ochets Hardware 86 Family 15 Model 2 St Object 1 3 6 1 4 1 311 1 1 3 1 1 Timelic 0 117 25 3 700 Orctets i Octets 7 OAY PC Orctets Gi Integer fg Integer Integer lntanar The first 500 entries are displayed Double click on a specific OID will open a pop up dialog for setting a new value for the OID SNMP Management Snmp Farameters Community public Targer Name or IP f g2 165 0 101 Setting SNMP Value Did 1 36 1 211 7 0 Type Integ
84. option the session with all its components will be exported so that they can be copied to a different Event24x7 installation by using the Import command Event24x7 User Manual Version 8 1 05 3 75 event 24x7 3 1 3 10 Handling Session Skeleton Activities Attach Detach Create Skeleton Rebuild by Skeletons If you select the Create Skeleton option the following message box will appear Create Skeleton Skeleton Mame Loup Cancel Create Skeleton Create a Skeleton from current session with all of its definitions and monitors collectors and parameters Attach Mark this session as built from the skeleton Detach Detach Skeleton from this Session Rebuild by Skeletons Rebuild the Session from its Skeletons Event24x7 User Manual Version 8 1 05 3 76 event 24x7 3 2 Service Configuration Service is a logical view that combines sessions and optionally other Services It provides the ability to monitor the organization at the Service level instead of the Session level Services Gontigura von Example RemoteLeaming Ea Example of Service Descriptions il 1 i Service Configure Delete x Cancel oO eyo I Event24x7 User Manual Version 8 1 05 3 77 event 24x7 3 2 1 General Tab service Mame Eyarnplet _ Example of Service Descriptions Service Name Unique identifier of a service Description User s description of the service Event24x7 User Manual Ver
85. other words are treated as parameters You can reference them with the system variables WORDn Take the n word from beginning of the command line FWORDn Take from the n word to the end of the command Event24x7 User Manual Version 8 1 05 4 167 event 24x7 4 2 4 3 Event parameter EWENT Purpose Perform an action based upon a scheduling time and terms criteria Fields Event Event Name A mandatory field Details The What Event enables a rule to be triggered based on its definition alone Usually rules are triggered based on incoming messages from the monitored session The Event rule does not check the incoming messages but is triggered based upon the Scheduling parameters from the When tab and the terms from the Terms Tab The Event rule uses cyclic checks The rule is triggered automatically at a specific day and time or at an interval set using the Interval parameter from the When tab Since the Event rule is triggered regardless of incoming messages 1t doesn t depend on What parameters When defining Event statement no other What parameter 1s required Event24x7 User Manual Version 8 1 05 4 168 event 24x7 4 2 4 4 Event Viewer Event Viewer String Method Simple Strings LCase 0 Sensitive Insensitive Event Header Type None Don t check z Purpose Perform an action based upon a specific string that appears in the incoming Event Viewer message or according to the header
86. ppp Li a a Verify te Event24x7 User Manual Version 8 1 05 Create a new workflow Open an existing workflow Save current workflow Save current workflow with different name Cut a single workflow activity Copy a single workflow activity Paste a workflow activity Undo do last change Redo last change Delete selected activity Automatic fit workflow to screen Run current workflow Stop current running workflow Verify workflow s activities names and connections Setup workflow s appearance 4 112 event 24x7 Click the Save As button from the operation buttons and select the Group name and the Workflow name Then click OK N Ale Handle a Eq aa ta Database fa Excel fi wMIFS Grow fk r E e Open Workflow Click the Open button from the operation buttons and select the Workflow name to open Then click OK Cele Handle a A aa ta Database ta Excel fia wMIFS Event24x7 User Manual Version 8 1 05 4 113 event 24x7 Click on the Run button from the operation buttons and select a target DES for the workflow to run on Then click OK The workflow will be sent to the selected DES and will be executed You can see it on the Parameter Dashboard tree under Workflow and the DES name LE Running Worktow Name whMIFS Target LOCAL DES 7 DES 4 1 2 Results When cube ended it might has one of three optional output results e None There are actions like Set from
87. scheduling parameters for active rules Still in order for a rule to become effective it needs to be activated first Time v Jan x Feb x Mar v Apr May x Jun v Jul v Aug v Sep w Oct Noy Dec Mo Restrictions From To Al yon Tue v Wed y Th Fi 4 Sat vf Sun 00 00 Days All Daily Stop After Interval Daily Process Stop after Minutes Minutes Seconds Select any of the following months week days and days of month interval and time frame Months Specify months the rule will be active Weekdays Specify weekdays the rule will be active Days Specify days the rule will be active From Time Specify the beginning time from which the rule will be active To Time Specify the end of the time frame during which the rule is active Daily Process Specify whether the rule will be scheduled on a daily basis If it is not checked the rule will not be scheduled automatically on the next day Stop After Stop rule after a number of executions Event24x7 User Manual Version 8 1 05 12 645 vent 24x7 Interval For cyclic rule specify the interval upon which the rule will be scheduled 12 2 3 User Experience Tab The User Experience tab is used to define the scenario to be simulated It contains a LUA script commands that the Event24x7 translates into actions The script can be written manually or can be copied and pasted from the Event24x7UserExperienceRecorder automator run note
88. several names that have special meanings and effects STARTUP SESSIONACTIVE SESSIONACTIVE lt session name gt All the rules with STARTUP as their group name will be automatically activated when CES is started When a session becomes active and the suitable message is displayed on the Focal Point Internal Session status is Active the Rule system searches for a Rule with a Rule Name equal to the Session Name that has just become Active and Group Name of SESSIONACTIVE If such a rule exists it is automatically activated This mechanism is helpful when there is a need to start activities when a session becomes Active Using the STARTUP group is not valid for this issue since the session might not be Active when CES is started For example sending IBs to Agent session can be done only when the session is active Similar to SESSIONACTIVE group Session name appears in the group It allows triggering several rules when the session becomes active Every day at 12 00 am a New Day process is performed During this process all the Event24x7 s Log files are closed and a new one is opened Immediately following this process rules with this group will be triggered It is useful for daily activities since it is triggered every starting day NEWDAY_STARTUP Combination of the groups STARTUP and NewDay Event24x7 User Manual Version 8 1 05 4 161 event 24x7 4 2 3 General Tab Learning how to use a Rulle Description
89. size for roll over in G eae empty ior Running State ae leave empty for Number of cycles remaining in Running state ee Not Running State leave empty for Consecutive Not Running to perform Action none Reports Location t f eave empty for PI eat Double click on a DES object will open the above dialog This dialog has some of the tabs from the DES configuration dialog When a project is deploying the DES will get its configuration from this dialog The available tabs are Operation Email Informing Database and Notification See DES Configuration section for more details Event24x7 User Manual Version 8 1 05 11 637 event 24x7 11 3 Session object 11 3 1 Session Properties Pane Properties Pane 4 AGENTLESS Node Caption Enable 4 Connection server Name Namespace Authentication 4 Credential Credential Type User Name Password 4 Skeletons Skeleton 1 Caption Enable Group Type Server Name Namespace Authentication Credential Type User Name Password ai x AGENTLESS 1 Enable Normal Default Specify system Session s name Session s Status Enable Disable Group name Object type Server name of the managed platform If the platform resides on the local PC it must remain empty WMI name space The default is root cimv2 Authentication level Normal or High Credential method Available Specify Use Credential User name Password Event24x7 User Manual V
90. the gradient direction Available options top to bottom bottom to top left to right right to left 20 2 2 Connection Type Setting up the connection type has the same effect as using the Event24x7 Setup program If you ran the Event24x7 Setup program you can disregard the connection parameters For a detailed explanation on the Connection Type parameters please refer to the Event24x7 Installation Guide chapter 3 Setup Event24x7 User Manual Version 8 1 05 20 714 event 24x7 20 3 Refresh EventVoice Dictionary The Event24x7 Speak Voice command sends a voice message to a phone number The EventVoice component performs a text to speak process to handle the request It analyzes word after word in the text EventVoice tries to Speak Each word The Speak process is based upon the EventVoice Dictionary The Dictionary is a simple TXT file in which every line contains the following in free format lt Word gt lt File to play gt When EventVoice needs to Speak a word it tries to locate the word in the dictionary If the word is found in the dictionary EventVoice plays the lt File to play gt and moves to the next word in the text If the word is not found in the dictionary EventVoice will pronounce the letters in the word one after the other You can add as many entries as you want to the dictionary EventVoice loads the dictionary during startup If you made changes to the dictionary file you can refresh it by using t
91. the special operations available Any special command will begin with the word automator The script can contain DES scope variables user variables which will be translated before each run of a script This way it is possible to use the same script with different values Event24x7 User Manual Version 8 1 05 12 642 event 24x7 12 1 User Experience Session Definition Define User Experience Session 12 2 User Experience Definition Define User Experience scenarios for execution a User expernence Dennom session UserExperience Group QA UE Notepad be ia FootLocker E Notepad Ha Webs Al UserExperience fa Event24x7 Download Hame Group Description kaai Order Disable Statistics Created 010 04 0 00 40 Changed 2012 10 03 15 13 By EWEMT Activate Hf New Delete IM Apply Event24x7 User Manual Version 8 1 05 12 643 event 24x7 12 2 1 General Tab Description Order Disable Statistics Created 2010 0407 00 40 Changed 2012 10 03 15 13 By EWENT Name Group Description Don t order this element Source User Experience object s Name identifier User Experience object s Group name identifier Optional description of this User Experience object Select this option if you want to disable this User Experience object Script or Workflow Event24x7 User Manual Version 8 1 05 12 644 event 24x7 12 2 2 When Tab The When tab defines the
92. the state of any monitored object in this environment and uses a set of activities in order to return the state to the required one 1 5 Business Process Control v Monitor the organization s Business Processes Link monitored object to Process or Processes Monitor the entire End to End Processes In cases of malfunction gt Identify the root causes Root cause analysis gt Try to cure the damaged object based on pre defined rules gt Try to find a workaround based on pre defined rules Event24x7 User Manual Version 8 1 05 1 24 event 24x7 1 6 Event24x7 Physical Architecture Event24x7 solution is defined as Client Server architecture and is composed of the following components The Central Event Server CES is the heart of the product It is Windows based core software that provides enterprise wide information and control The role of the CES is to be the manager of the managers The Distributed Event Server DES has similar functionalities as the CES It reduces the load from the Central Event Server CES by handling the session s traffic and performing initial rule processing and message suppression The DES part enables the clustering support The Remote Event Server RES is a Smart Agent It is platform specific software that probes and controls critical systems The User Experience UES It is capable of simulates any end user activities and measure the results The activities can be bro
93. the status of the upgrade action and its results Event24x7 User Manual Version 8 1 05 8 596 event 24x7 8 5 4 Installing Remote Program ia Installing KRemote Program Installing Remote User Installing Remote User Host Name 0 IFP Address Authorization Administrator for Target _ Credential Eventfdey Server User Application Source Flle Working Director It uses to install any 3 party program remotely Event24x7 User Manual Version 8 1 05 8 597 event 24x7 8 5 4 1 General tab Host Name D IF Address Authorization Administrator for Target C Credential Eventyr Server User Application Source Flle Working Directory Target Host Name Remote server host name IP Address Remote server IP address Authorization Specify User name User name to be used on remote server Administrator for Target Password Password to be used on remote server Event24x7 Server Select the server to install from User Application Source File The source file path and name Working Directory The working directory on the remote server Command to The command to execute on the remote server Execute I order to initiate the installation Event24x7 User Manual Version 8 1 05 8 598 event 24x7 8 5 4 2 Log tab The Log tab provides a list of the actions that the Event24x7 system is taking during the remote installation It also reports whether the installation was successful or a failur
94. the user queries Event24x7 User Manual Version 8 1 05 15 675 event 24x7 When selecting the Resize Tab similar windows will be displayed oe EORACLEORADAT A OAYMIRADZ DBF 50 NG E ODM 22 om ENORACLEORADATA YOAV M ODMO1 DEF 13 NO BAEN 400 a a ee E JORACLESORADAT A OAYM S STEMO1 DBF 400 amp TOOLS 10 oe ENORACLEORADATA OAM TOOLS01 DBF 10 UNDOTBS1 oe ENORACLEORADATA OAYMIUNDOTBSO1 DBF EA USERS ee E ORACLE ORADAT A OAYMILISERSOL DBF oe EORACLE ORADAT AY OAYMLISERSO2 DBF EA XDB a EORACLEORADAT A OA YM DEDI DBF The window shows the tablespaces and their datafiles Event24x7 User Manual Version 8 1 05 15 676 event 24x7 15 2 2 1 Resize Operation Double click on the File Name entry and a similar dialog will be displayed aue B resize S bs sessons ES Rotbock S Retbaxk robe ae Naini ails ela mmm Auto Datafile ESO RACLESORADAT A TOAYMSLUSER SOT OBF Current size 30 fin M bytes New size in Ml bytes x Cancel Type in a new size for the selected data file and press the OK button Event24x7 will perform the resize operation for the data file You can perform Resizing for several datafiles concurrently Select several datafiles and Double click on one of them Resizing Multiple Datafiles ae E ORACLE ORADATAWOAY z 5 IRADZ oe ENORACLEORADATAIYOAV obM 7 E ORACLEVORADAT AY Ou Number of datatiles 3 3 SYSTEM oe E ORACLEORAD
95. user who made the last change Event24x7 User Manual Version 8 1 05 3 36 vent 24x7 3 1 2 2 Operation Tab Rule at Startup Name Type Single Rule 0 Entire Group Target ICES o DES Debug AuleChectk Debug Level Number of Processes LES connection Staging Area Double the time for no Ti t IF connection decision te eu loves Log file Max log size for roll over in G eat i emptis Running State buf ee eave empty for Number of cycles remaining in Aunning state none fi Not Running State leave empty for Consecutive Mot Running to perform Action none Reports Location leave empty for default Rule at Startup Specify single Rule or group of Rules that will be activated automatically when connection with CES will be established Target Where to activate the Rule or Group of Rules when it is activated at DES startup Debug Set the debug level of the DES Has same meaning as the Server Debug Level Values Information Show only critical error messages This is the default Warning Show critical and warning messages Error Show all messages RuleCheck Number of concurrent processes that check Rules for triggering The default is one Change this number only if you were advised to do so from Event24x7 s technical support Event24x7 User Manual Version 8 1 05 3 37 Staging Area Log file Max log size for roll over in G Number of cycles remaining In Running State 3 1 2 3 C
96. what to do next The person can choose a response dynamically by typing the phone keypad Typing 1 to let Event24x7 run a condense job and 2 to re boot the computer The voice definition simulates a human having a phone conversion isl Torce Detmniton Group WINDOWS Voice DIALHOME a f WINDOWS BE DIALHOME PLAY E RECORD j ia SPEAK SpuUE WWO er X DIAL Operation Details n l Hook ON Dial Number 9559668 Hook OFF Label DIAL IF line busy goto BUSY Dial 3559668 IF no answer goto EUSY Play INTRO OR GET Digits Dioits 1 IF error goto ERROR IF Digits 1 Label ONE Play INVALID YOR End Voice Label ERROR End Voice Label SLEEP GOTO Label Event24x7 User Manual Version 8 1 05 4 302 event 24x7 The Voice screen has two parts e Voice List The Voice List is located at the left side of the screen and is displayed in a tree structure It contains the list of the all the defined Voice organized by groups which are logical units of Voice sharing some mutual content e Definitions Tabs The Voice definition tabs are at the right side of the screen Voice screen operation buttons New T new Add new Voice It opens the definition tabs for entering a new Voice entry Delete a Delete Delete the selected Voice entry Apply Ei Apply Save last changes in the file Event24x7 User Manual Version 8 1 05 4 303 4 8 1 Dial DLAL Dial Number IF line busy goto IF ho answer go
97. 0 1584640 31242486 1696 98996662272 203094896640 20980 1584640 31242486 1696 vent 24x7 215131267072 214926532608 215370698752 353933762560 215131267072 214926532608 215370698752 353933762560 5 343 event 24x7 5 4 4 Definition Options Parameter Definition Open the Parameter definition screen with the current Parameter 5 4 5 Runtime Options Parameter Threshold Threshold value for Parameter PreeSpacenll Severe Warning NWH Error NWH Severe NWH 5 0 0 0 x Cancel Open the defined threshold values for the parameter This screen lets you set a new threshold for the parameter By pressing the OK button the new threshold values will be affected starting from the next cycle of the parameter Event24x7 User Manual Version 8 1 05 5 344 event 24x7 5 5 Session Status Session Status screen shows the DES Status as well as the sessions that are connected to it The DES and Sessions are displayed in their hierarchical relation sessions statis Des Session Name Operating Interface Status Address Version My LOCAL DES GE 27 001 3 0 22 AGENT Windows TCPIP WS 127 0 0 1 3 0 Windows Agentless D 127 0 0 1 Mapi Client Disable E TcPIP E UNIX Disable 2 UserExperience Us Disable i REMOTE DES Disable The Session Status displays the sessions defined for Event24x7 and their statuses Each line has a background color according to the session s status Col
98. 014 23 01 15 Warning The screen displays the parameter s historical values Each entry represents a set of Collector and Parameter activities to retrieve the Parameter s State Line contains the Time of the value number of elements in each check the Value and the Parameter s highest state In case that the parameter has multiple occurrences for example the FreeSpaceAll has an entry for each drive at the monitored computer every one of them gets a state according to the threshold The state of the parameter is set as the highest calculated state of all of them The number of historical values kept for each parameter are defined at the Parameter Definition Screen in the Create tab at the Occurrence field Event24x7 User Manual Version 8 1 05 5 342 5 4 3 3 Report p Report or AGHIIDLESS treespaceall Bl s B State CO Date 11 05 26 2014 xn 2 or PM Warning 46 02 94 50 97 41 88 27 Date 11 04 26 2014 xn 2 or PM i 46 02 94 50 97 41 88 27 The report option displays the historical values with the report tool The display columns are all the Parameter s fields that are defined for this parameter The user can drag a column into the sort line and change the sort fields of the report dynamically 5 4 3 4 Chart In order to view the result as a chart you have to set the Display option of the parameter as a chart Event24x7 User Manual Version 8 1 05 98996465664 203094896640 2098
99. 08 event 24x 9 1 4 Modem connection in Event24x7 In order to check that the modem is connected and ready to work with Event24x7 you need to open the Operation menu and click on the Notification Status on the right side of the menu as shown below 3 S a 2 Event24x7 Trial version days left 74 oa Help Terminal f T Monit Mie j l Session erms b gt onitor lt fa Rule Variables Collector View Management Configuration Definitions E Run Diagram1 DA Es Q S E Run Diagram 2 Reports Cockpit System Database SNMP FileWatch s My Select diagram3 List Management Management Management Control eats J Eventvoice Jaf Parameter Diagrams Reports Management Operator Control Center Status a Facal Point i r Paramanta Dashboard i amp Notification Status SEE gt Modems Status h Port Status 6 Connected and Ready antivirus H EventRules E i EventViewer PI cis S ti H UserFileMonitor El Amir_RES g E GMAIL antivirus Eveni OPERATIONS SNMP_LOCAL Sessions Status Des Session Name Operating Interface Status Address Version Se LOCAL DES BE 127 0 0 1 4 MONITOR_NJ Disable 10 13 103 100 4 MONITOR_NY Disable 172 17 103 100 4 MONITOR_SNG Disable 192 168 0 189 44 MONITOR _UK Disable 172 21 103 100 Sou MEYA MARI Nisahle 1N 13 1N31N1 m e ae n ma 9 tna gen Laag P BD0 in amire t
100. 1 Unzip the Web Application package 2 Open CMD as Administrator 3 Change directory to the place where you uncompressed the package 4 To simulate the deployment and verify that you system is ready o trigger version deploy cmd T 5 To deploy o trigger version deploy cmd Y Notice Web Deploy must be installed on your computer The deployment will create update web site named Event24x7 Web For example http localhost Event24x7 Web Event24x7 User Manual Version 8 1 05 23 727 Vent 24x7 24 Copy Rights 2003 TriggerPlus Software Ltd TRADEMARKS UNIX is a registered trademark in the United States and other countries exclusively licensed through X Open Company Lid MVS and AS400 are a trademark or registered trademark of IBM in the United States and other countries NT is a trademark or registered trademark of Microsoft in the United States and other countries CONTROL M is a registered trademark of BMC Software AppSight Code by Identify THIS PUBLICATION IS PROVIDED AS IS WITHOUT WARRANTY OF ANY KIND EITHER EXPRESS OR IMPLIED INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE OR NON INFRINGEMENT THIS PUBLICATION COULD INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN THESE CHANGES WILL BE INCORPORATED IN NEW EDITIONS OF THE PUBLICATION SUN MICROSYSTEMS INC MAY MAKE IMPROVEMENTS AND OR CHANGES I
101. 13 664 event 24x7 end downtine Mai J Notify Automatic Notification during Downtime Subject Message Enabling the Automatic Notification during Downtime Handle Notify Set this field to activate the Automatic Notification during Downtime Emails Downtime Mail To Set the mail recipient Mailing List Set this field to send the mail to a mailing list In this case the Mail To field points to a Mailing List that is defined at the Script definition Subject The text that will be added to the subject of the message Message The text that will be added to the body of the message Server Select server for the mail to be sent from Event24x7 User Manual Version 8 1 05 13 665 event 14 Terminals The Terminal facility is a real console for each active session When choosing the Terminal option from the Event24x7 Main Menu you get a list of the available consoles L Terminal AGENT LESS 0 X The terminal shows the incoming messages from the monitored session and lets the user send commands to the session Sending commands is done by typing in the Command line at the bottom of the screen then pressing Enter For example send DIR c command to a Windows RES smart agent by typing the following command cmd exe c dir c The answer will be displayed back on the terminal Long lines that exceed the display width are rolled automatically into multiple lines in
102. 3 4 EXPIRED 9 3 5 RECIPIENTS 9 3 6 WEEKLY 9 3 7 ON DUTY 9 4 USING NOTIFICATION CENTER 10 SKELETON 10 1 SKELETON NAMES 10 2 SKELETON DEFINITION 11 PROJECT 11 1 GETTING STARTED 11 2 DES OBJECT 11 2 1 DES PROPERTIES PANE 11 2 2 DES PROPERTIES FOR PROJECT 11 3 SESSION OBJECT 11 3 1 SESSION PROPERTIES PANE 11 3 2 SESSION PROPERTIES FOR PROJECT 11 4 DES SESSION CONNECTION 12 USER EXPERIENCE 12 1 USER EXPERIENCE SESSION DEFINITION 12 2 USER EXPERIENCE DEFINITION 12 2 1 GENERAL TAB 12 2 2 WHEN TAB 12 2 3 USER EXPERIENCE TAB 12 3 USER EXPERIENCE INTERCEPTOR 12 4 INTERCEPT TAB 12 5 USER EXPERIENCE COMMANDS 12 6 AVAILABLE KEYS 12 7 SCRIPT EXAMPLE 12 8 EVENT24X7 USER EXPERIENCE RECORDER 13 DOWNTIME 13 1 GENERAL TAB 13 2 DETAILS TAB 13 3 IMPACT TAB 13 4 MONITORS TAB 13 5 START DOWNTIME MAIL TAB Event24x7 User Manual Version 8 1 05 1 16 9 618 9 620 9 621 9 622 9 623 9 624 9 625 10 626 10 627 10 629 11 631 11 632 11 636 11 636 11 637 11 638 11 638 11 640 11 640 12 642 12 643 12 643 12 644 12 645 12 646 12 647 12 648 12 649 12 651 12 653 12 656 13 657 13 658 13 660 13 661 13 662 13 663 event 24x7 13 6 END DOWNTIME MAIL TAB 13 7 NOTIFY TAB 14 TERMINALS 14 1 TOOLBAR 14 2 TERMINAL SETUP 14 3 CHANGING FONT 14 4 CHANGING COLOR ITEMS 15 CONTROL CENTER 15 1
103. 7 5 7 IBs Status The IB Status screen displays the status of all the active IBs on Different RES Servers An IB becomes active when Activate is performed from the IB Definition screen See IB Definition 16s statis trom 05 76 7014 2371213 AGENT h IB Name Description Count Status HttpGetContent Get Web page ConsumingProc PerfMon Example of perf ResourceCPU Service Service state FreeSpaceall Free Space HttpGet Get Web page Port amp can Process status Uptime Monitor memory 2 Process Process status a DriveSpaceC service state CPU Oo GO OG DO OGOGO DOOL The IBs Status window has similar functionalities as the Rule Status window Event24x7 User Manual Version 8 1 05 5 347 5 8 Terms Sta Terms Status lists all the user eras Stairs E x CES Server Terms Warne U PRINTER I5S READY UNIX I5 DOWN event 24x7 tus defined terms and allows updating of the terms OK amp Cancel Term has a scope of Server or Universal Scope Server is defined only at the server in which it defined Scope Universal is defined at all Event24x7 servers Universal Terms are displayed only at the CES Server Toolbar Add New Delete Servers list Toggle the Add New Terms line The line is displayed at the bottom of the Terms screen To add a new terms fill the term s field and click on the OK button on that line Delete the selected terms Choose Event24x7 Ser
104. 8 4 1 1 Existing Session 8 4 1 2 New Session 8 4 1 2 1 Select DES type 8 4 1 2 1 1 Existing DES type 8 4 1 2 1 2 New DES type 8 4 2 WIZARD STEP 2 SELECT SOLUTION 8 4 3 WIZARD STEP 3 RUNTIME PARAMETERS 8 4 4 WIZARD APPROVAL 8 5 DEPLOYMENT CENTER 8 5 1 INSTALLING REMOTE DES 8 5 1 1 General tab 8 5 1 2 Log tab 8 5 2 INSTALLING REMOTE RES 8 5 2 1 General tab 8 5 2 2 Log tab 8 5 3 MAINTENANCE 8 5 3 1 General tab 8 5 3 2 Log tab 8 5 4 INSTALLING REMOTE PROGRAM 8 5 4 1 General tab 8 5 4 2 Log tab 8 6 DISCOVERY CAPABILITIES 8 6 1 DISCOVERY 8 6 1 1 General tab 8 6 1 1 Log tab 8 6 2 RESULTS 8 6 3 CREATE SESSIONS 9 NOTIFICATION CENTER 9 1 CONNECTING WIRELESS MODEM 9 1 1 ADD THE MODEM TO WINDOWS 9 1 2 TESTING THE MODEM 9 1 3 ENABLE NOTIFICATION CENTER 9 1 4 MODEM CONNECTION IN EVENT24X7 9 2 RECIPIENT DEFINITION 9 2 1 GENERAL TAB 9 2 2 ADDRESSES TAB 9 2 3 No SMS TAB 9 3 GROUP DEFINITION 9 3 1 GENERAL TAB Event24x7 User Manual Version 8 1 05 1 15 8 570 8 571 8 572 8 573 8 574 8 575 8 575 8 576 8 577 8 577 8 579 8 582 8 584 8 585 8 587 8 587 38 588 8 589 8 590 8 591 8 593 8 594 8 595 8 596 8 597 8 598 8 599 8 600 8 600 8 601 8 602 8 603 8 604 9 605 9 606 9 606 9 607 9 608 9 609 9 611 9 612 9 613 9 614 9 615 9 616 9 3 2 PROPERTIES 9 3 3 ESCALATION 9
105. 9 6 10 50 6 10 51 6 10 52 6 10 53 6 10 54 6 10 55 6 10 56 6 10 57 6 10 58 6 10 59 6 10 60 6 10 61 6 10 62 6 10 63 CTM Joss CTM LOADS SET CTM RESOURCE CTM SHOUT DATABASE COMMAND DATABASE COMMAND FREE DATABASE INSERT EVENT24X7 DATABASE RESET DISPLAY ELSE ELSE OBJECT ELSE PARSER EXCHANGE MOVE EXIT RULE FILE COPY TO SERVER FILE HANDLE IB APPLICATION POOL IB BOOT IB DISK SPACE IB MEMORY IB PERFORMANCE IB PERFORMANCE VB SCRIPT IB PROCESS IB RESOURCES IB SERVICE IF IF OBJECT IF PARSER LOG EVENT24Xx7 LOG USER MAIL MAIL STATUS RUN NOTIFICATION ACKNOWLEDGEMENT NOTIFICATION CENTER NOTIFICATION SMS IMMEDIATE PARSE FILE AND SET PARSE INPUT AND SET PING PLAY FILE POPUP PRINTER STATUS RUN PROGRAM PROGRAM AS USER REMOVE RULE REPORT RESTART SERVER SELECT SEND SERVER Event24x7 User Manual Version 8 1 05 1 13 6 487 6 488 6 489 6 490 6 491 6 492 6 493 6 494 6 495 6 496 6 496 6 496 6 497 6 498 6 498 6 499 6 500 6 501 6 502 6 503 6 504 6 505 6 505 6 506 6 507 6 509 6 511 6 512 6 514 6 515 6 516 6 518 6 519 6 520 6 522 6 523 6 523 6 525 6 526 6 527 6 528 6 529 6 530 5 531 O 532 6 533 6 534 6 535 6 10 64 6 10 65 6 10 66 6 10 67 6 10 68 6 10 69 6 10 70 6 10 71 6 10 72 6 10 73 6 10 74 6 10 75 6 10 76 6 10 77 6 10 78 6 10 79 6 10 80
106. ATAIYOAY i TOOLS Es E ORACLEORADATA OAN UNDOTES1 EORACLEORADA TA OAY New size BAe ORACLE ORADATAIYOAYMILISERSO1 DBF 100 30 NO E EORACLEORADATAY OAVMILUISERSO2 DBF 96 4 WO WF Event24x7 User Manual Version 8 1 05 15 677 event 24x7 15 2 2 2 Adding Data file Operation Selecting a tablespace and pressing the right mouse button will open a popup window with possible actions ZL Query El Resize B Jobs 4 Sessions E Rollback E Rollback 8 Rollback W Adding Datafile INDY oe EORACLEVORE IRADZ Tablespace SYSTEM oe EORACLEVORE Ej opm e ENORACLEYORA Datafile 6 Beag oe EAORACLEORA Size O E TOOLS oe EORACLEVORA UNDOTBS1 oe EORACLEVORE USERS oe E ORACLEVORA oe ES ORACLELORE n Autoextend Fill the new data file name and the required size Event24x7 User Manual Version 8 1 05 15 678 event 24x7 15 2 3 Job Tab When selecting the Jobs Tab similar windows will be displayed Mal dauna 2 Resi El sessions B Rollback Jobs User LastDate NextDate_ Interval failures Sec broken SYSTEM 15 12 2005 14 15 16 12 2005 14 sysdate The Jobs tab manages Jobs and changes their status 15 2 3 1 Jobs Operation Selecting process and pressing the right mouse button will open a popup window with the following actions Break the job Run ch job Choose one of the entries to perform the desired action
107. Alert Event24x7 User Manual Version 8 1 05 5 333 event 24x7 5 3 2 Operations Applying to Alerts Several operations may be performed on an Alert depending on its status Access to this feature is achieved by placing the cursor on an Alert line and clicking the right mouse button A pop up window opens to show the available operations Some of the operations require Event24x7 Administrator privileges Display Alert s history O TE Change the status back to Open Change the Alert s status to Closed Remove the Alert from the alert list Display Alert s history Close Reopen Change the status back to Open Remove the Alert from the alert list Display Alert s history Event24x7 User Manual Version 8 1 05 5 334 event 24x7 5 3 3 User Assign Process When choosing this option from the Alert s Operation pop up window the following dialog opens User Assign User ID Full Hame ADMINIS Event2d MAS everit Event User GUEST Guest User il USER Guest User in The dialog presents the entire list of users defined to Event24x7 The assignment of a user 1s done by selecting a user from the list and clicking the OK button As a result the dialog will close and the new status will be displayed at the appropriate alert 5 3 4 Toolbar gE View Al p amaaa The Toolbar contains the following options Setup Start the Setup screen gal View Filter Filter the viewed Alerts The available options View A
108. Assign group that don t have any output e Boolean There are actions like Ping command that the output is Boolean for success or failure The result of this cube can be checked with IF Statement cube by special variable The condition node SUCCESS result TRUE if node results was true e Values There are actions like File Size that return a value as a result There are actions like WMI or Database Query that might return multiple lines of values Workflow automatically keep this result for later use The Workflow allow to access every line in a loop The proper way is to perform While Statement from the Flow group to iterate every line from the result Using Assign Entry from the Assign group assign every iterated line into user variable Look at the WMI workflow for example Event24x7 User Manual Version 8 1 05 4 114 4 1 3 System Variables e Workflow variable prefix is e General access is nodename Or nodename xxx Where xxx is line number of the group set or reserved word e Prev string when use as nodename refer to the previous node e Reserved word e Get indication 1f action succeeded The value 1 for success or O for failed node SUCCESS e Get number of elements in groupset node Elements e For LOOP get index of current indices node INDEX e Need way to access specific index node Line e Column COLUMN Column held in special CstringArray defined Event24x7 User Manual Version
109. B connection values are defined at the monitor level Event24x7 User Manual Version 8 1 05 6 368 event 24x7 6 5 Collector Definition The Collector object executes a single command or request at the monitored environments The result of the request is kept at a temporary file and is used later by the Parameter for its own calculations or checks Monitoring Denniiaon Session AGENTLESS Pro Active SPU WLWO F 3 SNMPPrinter H SNMPSystem H 2 SNMPUtilization System E H AvailableMBytes Check whether CPU is over 80 469 wes ae Description during two consecutive minutes ConsumingProcesses i E cPU FreeSpaceAll H HTTP H MemoryUtilization Ae Enable l H PerfMon O Disable H Ping Intermediate file E PortsTCP ln Memory Perormance 4 Delete file Process Statistics H Service Created 2014 04 26 09 36 H SMARTPredictedFailure E uptime Changed 2014 04 26 03 36 By FROM SKELETON WebAccess oe Ef Ef EE ft El Ge Ge H E The highlighted icon Indicates Pro Active The Collector screen has two parts e Collector List The collector list which is located at the left pane of the screen and is displayed in a tree structure It contains the list of all the defined Collectors organized by groups A group is a logical unit sharing some common content for the collectors within this unit e Definitions tabs The collector definition tabs are at
110. BILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE s s Part 4 bun Microsystems Inc Copyright notice BSD THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY Of LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Part 5 Sparta Ino Copyright notice BoD THIS SOFTWARE IS PROVIDED B
111. CASE expression CASE END SELECT END You can add action statements between the CASE and CASE END lines and they will be executed only when the CASE expression is TRUE You can add several CASE statements in the SELECT Only the first CASE clause that it s expression is true will be executed among all the CASE statements Event24x7 User Manual Version 8 1 05 6 534 event 24x7 6 10 63 Send Server Send Value to DES Server Mame Va OOO Semer LOCAL DES y Purpose Send a User Variable From the CES server to the DES Server Fields Name Variable name Do not prefix the name with Value Variable value Server The Event24x7 s DES server to which the User s Variable is sent to Details Mechanism to pass values from CES to any one of the DES The User Variable will have the Server scope at the DES side Event24x7 User Manual Version 8 1 05 6 535 event 24x7 6 10 64 Send Value Send Value to IB Mame Purpose Send User Variable From CES to DES or from the DES to the RES Fields Name Variable name Do not prefix the name with Value Variable value Session Agent name running on the RES machine Details Mechanism to pass values from CES to DES or to any one of the RESs The User Variable will have the Server scope at the RES side Event24x7 User Manual Version 8 1 05 6 536 event 24x7 6 10 65 Server Command Send Event to Server Server CES Server Purpose Send Event to Fo
112. CES if requiered f i a me Installing Remote R Same as Target J Credential Specify Installing Remote RES K Cancel Fertorm Event24x7 User Manual Version 8 1 05 8 590 event 24x7 8 5 2 1 General tab Host Name IF Address Port 2756 Authorization Administrator for Target Credential 1S Specify Add Definition DES Hame User Hame Password LOCAL DES Authorization Administrator for CES if requiered Same as Target Credential Specify Target Host Name IP Address Port Authorization Specify User name Administrator for Target Password Add Definition DES Name Authorization Same as Target Administrator for CES if required Specify User name Event24x7 User Manual Version 8 1 05 Remote server host name Remote server IP address The port used for communication User name to be used on remote server Password to be used on remote server If Checked Session Definition for this RES will added automatically into Event24x7 The DES under which the RES will be installed Use the same user and password as specified for the target User name to be used for CES 8 591 event 24x7 Password Password to be used for CES Event24x7 User Manual Version 8 1 05 8 592 event 24x7 8 5 2 2 Log tab The Log tab provides a list of the actions that the Event24x7 system is taking during the remote installation It also repo
113. CK SCROLLLOCK SCROLLLOCK Event24x7 User Manual Version 8 1 05 12 652 BRSBACK BRSFORWARD BRSREFRESH BRSSEARCH BRSHOME VOLMUTE VOLDOWN VOLUP MEDIA_NEXT_TRACK MEDIA_PREV_TRACK MEDIA_STOP MEDIA_PLAY_PAUSE LAUNCH_MAIL LAUNCH_MEDIA_SELECT LAUNCH_APP1 LAUNCH_APP2 COLON PLUS COMMA MINUS PERIOD QUESTION TILDA LEFT_BRACKET PIPE RIGHT_BRACKET QUOTE event 24x7 BROWSER BACK BROWSER FORWARD BROWSER REFRESH BROWSER SEARCH BROWSER HOME VOLUME MUTE VOLUME DOWN VOLUME UP MEDIA NEXT TRACK MEDIA PREVIOUS TRACK MEDIA STOP MEDIA PLAY PAUSE LAUNCH MAIL LAUNCH MEDIA SELECT LAUNCH APPI LAUNCH APP2 COLON PLUS COMMA MINUS PERIOD QUESTION TILDA LEFT_BRACKET PIPE RIGHT_BRACKET QUOTE 12 7 Script Example The following is a script example for launching an internet explorer connecting to triggerplus com site and measuring how time it took for the triggerplus webpage to appear by searching for the word TriggerPlus in the page with a 10 seconds timeout If no such word is found after 10 seconds the script will be stopped If the page has loaded the Free Download menu control and the Download Now button will be clicked and the user details will be entered before getting to the download links page Once there the Download Event24x7 Trial Version will be clicked as well as the Save button in the popup window The script will stay in wait State a few seconds and then it will be closed Event24
114. DETERMINATION 22 1 CONCEPT 22 1 1 EVENT24X7 TEST EXTERNAL COMPONENTS PROGRAMS 22 1 2 EVENT24X7 AUDIT LOG FILE 22 2 EVENT24X7 TEST EXTERNAL COMPONENTS PROGRAMS 22 2 1 TESTPIPE PROGRAM 22 2 2 TEST VOICE PROGRAM 22 2 3 TEST MAIL PROGRAM 22 3 EVENT24x7 AUDIT LOG FILE 23 EVENT24X7 WEB INTERFACE 23 1 WEBINTERFACE REQUIREMENTS 23 2 WEB APPLICATION INSTALLATION 24 COPY RIGHTS Event24x7 User Manual Version 8 1 05 1 19 20 715 21 716 22 717 22 717 22 717 24 717 22 718 22 718 22 721 22 724 22 725 23 726 23 726 23 727 24 728 event 24x7 1 Introduction 1 1 TriggerPlus Software TriggerPlus is a leading global provider of automated monitoring and management solutions and pioneered the development of an agentless solution for managing and controlling heterogeneous environments Headquartered in Israel TriggerPlus is a Independent Software Vendor ISV established by a team of experts in the field of enterprise systems management and the company s R amp D team consists of veterans of the systems management space TriggerPlus boasts a large customer base in both the SME and OEM markets 1 2 TriggerPlus Vision To provide the best easy to implement use and maintain solution for manage and control business processes in heterogeneous environments 1 3 What is Event24x7 Event24x7 is a state of the art Monitoring and Event Management solution that provides a new concept for
115. Export Skeleton Handling Depending upon your selection another dialog will be opened 3 1 3 9 1 Copy Session If you select the Copy option the following screen will appear Handing Session Copy Curent Session Mame AGENTLESS Hew Session DES LOCAL DES i x Cancel This dialog performs the following Session Operation Copy a session with all the Session s components to a new one The copy operation copies the entire definitions Monitors Collectors and Parameters Event24x7 User Manual Version 8 1 05 3 73 vent 24x7 If you select the Rename option the following dialog will appear 3 1 3 9 2 Rename Session Rename Current Mame AGENTLESS Cancel Rename the selected session to a new name 3 1 3 9 3 Move Session If you select the Move option the following message box will appear Handing Session Move Current Session Name AGENTLESS DES LOCAL DES x Cancel Move a session with all the Session s components to another DES The move operation includes the entire definitions Monitors Collectors and Parameters Event24x7 User Manual Version 8 1 05 3 74 event 24x7 If you select the Delete option the following message box will appear 3 1 3 9 4 Delete Session Gonna ton re WOW sure you want to delete session AGENTLESS Delete the session and all the Session s components 3 1 3 9 5 Export Session If you select the export
116. Folders 4 1 4 1 1 Get File Query 4 1 4 1 2 4 1 4 1 3 Set File Action Get File Time Different 4 1 4 1 4 Get Folder Query 4 1 4 1 5 File Excel Action 4 1 4 2 Services amp Processes 4 1 4 2 1 Service 4 1 4 2 2 Process 4 1 4 2 3 Start Process As User 4 1 4 3 Execution Event24x7 User Manual Version 8 1 05 4 109 4 110 4 111 4 114 4 115 4 116 4 116 4 116 4 116 4 117 4 117 4 118 4 119 4 119 4 120 4 121 4 122 event 24x7 4 1 4 3 1 DES Command 4 1 4 3 2 Get CPU 4 1 4 3 3 Performance Monitor 4 1 4 3 4 Port Scan 4 1 4 3 5 Http 4 1 4 3 6 Command 4 1 4 3 7 Command Special 4 1 4 3 8 Server Command 4 1 4 3 9 Command DOS 4 1 4 4 Windows 4 1 4 4 1 WMI Query 4 1 4 5 UNIX amp Linux 4 1 4 5 1 Single SSH Command 4 1 4 6 FTP 4 1 4 6 1 Connect 4 1 4 6 2 FTP Get Set 4 1 4 6 3 File Handle 4 1 4 6 4 Folder Handle 4 1 4 6 5 Change Directory 4 1 4 7 Network 4 1 4 7 1 Ping 4 1 4 8 Database 4 1 4 8 1 Query 4 1 4 8 2 Command 4 1 4 9 SNMP 4 1 4 9 1 Get 4 1 4 9 2 Get Next 4 1 4 9 3 Get Bulk 4 1 4 9 4 Send Trap 4 1 4 9 5 Send MIB Trap 4 1 4 10 Notification 4 1 4 10 1 Popup 4 1 4 10 2 Mail 4 1 4 10 3 Notification Center 4 1 4 10 4 Display 4 1 4 10 5 Beep 4 1 4 10 6 Alert 4 1 4 11 Log 4 1 4 11 1 Append Line 4 1 4 11 2 Append Node Results 4 1 4 11 3 Convert Query to HTML 4 1 4 12 Assign 4 1 4 12 1 Assign Entry 4 1 4 12 2 Set 4 1 4 12 3 Set String 4 1 4 12 4
117. Handle CONTROL M conditions CTM Jobs Orders or forces jobs from a Scheduling table CTM Load set load balancing algorithm for CONTROL M CTM Resource Performs operations on the Quantitative Resources table CTM Shout Sends a message to the specified user or destination Directory Watch Report on any file changes at the specified directory Display Display a message to the focal point Else Add an ELSE line to the IF THEN statement Event24x7 User Manual Version 8 1 05 4 266 Else Parser Exit Rule File Copy to Server File Find HTTP IF IF Object IF Parser Log Event24x7 Log User Mail Mail Status Run Notification SMS Immediate Parse File and Set Parse Input and Set Ping Play File Popup Printer Status Run Program Program as User Remove Rule Report Restart Server Select Send Server Send Value Server Command Server Parameter Session Set Set Parameter Set String Sleep SMS SMS Wireless SNMP Mib Interactive SNMP Mib Trap SNMP Send Trap Table Talk Event24x7 User Manual Version 8 1 05 event 24x7 Part of the If Parser command the statements following the Else parser are performed when the IF parser conditions are not met Stop the execution of the current rule Send file to EventStudio Find files with specific attribute at a specified directory Check availability of URL Open IF THEN statement Open IF Object statement Open IF THEN compiled statement like IF but for mu
118. Handling Directory IB Handling File IB HTTP IB Memory IB NT Log Watch IB Performance IB Performance VB Script IB Port Scan IB Process IB Resources IB Service IB User Folder Watch IB User Log Watch IB WMI Command event 24x7 Ability to manage dynamic arrays in memory on the fly Send a TCP IP packet to host Add or delete a term Start Event24x7 IVR request Open DO WHILE statement There are also commands that apply to a particular operating system that the RES smart agent runs on each is prefixed with IB Add a record to the Application Event Viewer Handle IIS application pool Restart or shut down the machine Specific command to run on the Information Base Check for CPU consuming processes on local computer Perform database queries on local computer Create Log file for the running IB and set its debug level Check for disk space total disk space free disk space or available space for the calling program Check for existence of a file process or service Handle a directory on local machine Handle a file on local machine Check availability of URL Memory utilization total physical memory size available physical memory size paging file size and more memory variables Watch Application for the NT Log files Security System or Application Provide Performance Monitor perfmon values Provide Performance Monitor values via VB script Scan ports in TCP or UDP mode Check for running pr
119. Header Check if the sheet has header line Sheet Sheet number to handle Results Set SUCCESS Event24x7 User Manual Version 8 1 05 4 118 event 24x7 4 1 4 2 Services amp Processes 4 1 4 2 1 Service Purpose Handle Service Fields Type Start Stop Status Restart Service Service name Server Server name Retry Number of retries Results Set SUCCESS Event24x7 User Manual Version 8 1 05 4 119 4 1 4 2 2 Process Purpose Fields Results event 24x7 Handle Process Type Process Server Credential Type Credential Status Count Processes List Matches CPU Usage Virtual Memory Working Set Memory Kill Process Process name Server name Specify Use Credential User Name Password Credential Set SUCCESS for Folder Exist Event24x7 User Manual Version 8 1 05 4 120 4 1 4 2 3 C Pusa L Purpose Fields event 24x7 Start Process As User Run a program under a specific user credentials When a program must be started with a certain user credentials like a program that reads from SQL and the SQL authentication is Login User Program Parameters Directory User Password Domain Profile Environment Use Gateway for Windows 2008 Server Event24x7 User Manual Version 8 1 05 Name and path of the program Run time parameters for the program Directory path User name Password Network Domain name Option to restore the User profile Option to restore the User envir
120. IABLES FOR INFORMING TAB 17 2 PARAMETER S LATEST VALUE 17 3 SYSTEM FUNCTION 17 3 1 DATE FUNCTIONS 17 3 1 1 Difference between date and current date 17 3 1 2 Difference between two dates 17 3 1 3 UNIX date support 17 3 1 4 Old functions 17 3 2 SIZE FUNCTIONS 17 3 3 SERVICE STATUS FUNCTIONS 17 3 4 TABLE LOOKUP FUNCTIONS 17 3 5 STRING FUNCTIONS 17 3 6 COUNT OCCURRENCES IN STATE 18 PACKAGING USER SOLUTIONS 18 1 GENERAL 18 2 CREATING A USER SOLUTION 18 3 CREATING AN ENTRY AT THE SKELETON LIBRARY 18 3 1 CHOOSING THE DIRECTORIES 18 3 2 COPING THE FILES 18 4 CREATING THE SOLUTION CONTROL FILE 18 4 1 SKL DETAILED FILE 19 ADVANCED TOPICS 19 1 TRAVELING MESSAGES BETWEEN DES AND CES 19 1 1 GENERAL 19 1 2 FILE WATCH CONTROL 19 1 3 FOCAL POINT AND TERMINAL 19 1 4 RULES 20 EVENTVOICE 20 1 STARTING EVENTVOICE 20 2 EVENTVOICE SETUP 20 2 1 BACKGROUND VIEW 20 2 2 CONNECTION TYPE 20 3 REFRESH EVENTVOICE DICTIONARY Event24x7 User Manual Version 8 1 05 1 18 16 695 16 695 17 696 17 697 17 697 17 698 17 699 17 699 17 699 17 699 17 700 17 701 17 702 17 702 17 702 17 703 17 704 18 705 18 705 18 705 18 706 18 706 18 706 18 707 18 708 19 709 19 709 19 709 19 709 19 709 19 710 20 711 20 711 20 712 20 714 20 714 20 715 C VeNT 24x7 20 4 EVENTVOICE STARTUP PROCESS 21 SECURITY 22 PROBLEM
121. IB important part for translating the trap Object and Trap definitions When a MIB trap arrives and Event24x7 MIB 1s defined for the MIB Event24x7 will display the meaning of the trap with a number Be i itp ennon Group General Mib NICE a o Object Entry H SUN Mame priority FEIS OI 1 3 6 1 4 1 19400 1 5 6 3 Type IMT 32 esourceNFC Code Meaning j state ameNFC 1 priority FC 2 major 3 critical minor esourcel stateN ame 23 state ameT 24 priority T Pa New a Delete E Apply Activating the MIB trap is done at the SNMP session definition Event24x7 User Manual Version 8 1 05 4 314 event 24x7 4 9 1 General Tab Mame NICE Group General Description 1 3 6 1 4 1 19400 1 5 Statistics Created 2006 05 27 23 27 Changed 2006 06702 01 00 By EVENT Purpose Define the MIB name and the Trap Object Identifier Fields Name Event24x7 MIB Trap name Group Object Identifier Description Optional Trap description OID Object Identifier of the expected trap This is the Trap key Every MIE trap has a unique number Details Event24x7 User Manual Version 8 1 05 4 315 event 24x7 4 9 2 Object Object Entry Mame resourceNFES resource FEIS OIG 1 3 6 1 4 1 19400 1 5 6 1 state ame FEIS Type INT 22 priority FEIS ezourceh FE Code Meaning state ame FE feiz priority FE esource tate ameT 23 stateN ame 24 p
122. ICATION ENABLE DISABLE NOTIFICATION SMS IMMEDIATE PARSE FILE AND SET PARSE INPUT AND SET PING PLAY FILE POPUP PRINTER STATUS RUN PROGRAM PROGRAM AS USER REMOVE RULE REPORT RESTART SERVER SELECT SEND SERVER SEND VALUE SERVER COMMAND Event24x7 User Manual Version 8 1 05 4 194 4 195 4 196 4 197 4 198 4 199 4 200 4 201 4 202 4 202 4 203 4 203 4 204 4 205 4 206 4 207 4 208 4 209 4 210 4 211 4 212 4 213 4 214 4 215 4 217 4 218 4 220 4 221 4 222 4 224 4 225 4 226 4 227 4 228 4 230 4 231 4 232 4 233 4 234 4 234 4 236 4 23 7 4 238 4 239 4 240 4 241 4 242 4 243 4 3 62 4 3 63 4 3 64 4 3 65 4 3 66 4 3 67 4 3 68 4 3 69 4 3 0 4 3 71 r 4 3 73 4 3 74 43 73 4 5 10 4 3 77 4 3 78 4 3 79 event 24x7 SERVER PARAMETER SESSION SET SET PARAMETER SET STRING SLEEP SMS SMS WIRELESS SNMP MIB INTERACTIVE SNMP MIB TRAP SNMP SEND TRAP TABLE TALK TCPIP TERMS TEXT IN SCREEN USER EXIT VOICE WHILE 4 4 INFORMATION BASE DEFINITION 4 4 1 IB GENERAL DEFINITION 4 5 INFORMATION BASE amp RULES 4 5 1 ACTION TAB FOR INFORMATION BASE 4 6 ACTION PARAMETERS FOR INFORMATION BASE 4 6 1 4 6 2 4 6 3 4 6 4 4 6 5 4 6 6 4 6 7 4 6 8 4 6 9 4 6 10 4 6 11 4 6 12 4 6 13 4 6 14 4 6 15 4 6 16 4 6 17 4 6 18 4 6 19 4 6 20 4 6 21 4 6 22 4 6 23 4 6 24 4 6 25 IB AP
123. IF THEN compiled statement like IF but for multiple conditions Write a text message to CES or DES Even24x7 log file Write a text message into any user file Send an email notification Send Parameters status via mail Acknowledgement for mail Activate the Notification Center for the current Parameter Send an immediate SMS notification Convert a file to Event24x7 variables Convert a single message to Event24x7 variables Optionally you can send them to Parameters Check address for connection Play file to get the operator s attention Display a variety of notification popup windows Execute any external program at the Server machine Execute any external program under User credential Remove a rule or group from memory Save a report for Open Problems on Event24x7 Restart current Event24x7 server Open Select statement Send User Variable from CES to DES Send User Variable from CES or DES to IB Agent of RES Simulate receiving command on the Focal Point Send Parameter to DES 6 470 event 24x7 Session Stop Start session Set Create and assign values to a User Edit variable Set Parameter Set a value to a Parameter bypassing a Collector Set String String manipulation Sleep Sleep for a specified amount of seconds SMS Send SMS message via internet SMS Wireless Send SMS message via cellular modem SNMP Mib Interactive Send or Get or Set SNMP requests for SNMP objects SNMP Mib Trap Send a SN
124. L CMU OR THE REGENTS OF THE UNIVERSITY OF CALTFORNIA BE LIABLE FOR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM THE LOSS OF USE DATA OR PROFITS WHETHER IN AN ACTION OF CONTRACT NEGLIGENCE OR OTHER TORTIOUS ACTION ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE Part 2 Networks Associates Technology Ine copyright notice BSD THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROELTS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Event24x7 User Manual Version 8 1 05 24 728 24x gt Part 3 Cambridge Broadband Ltd copyright notice BSD THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTA
125. Local variables can t be accessed by other rules Server Variables scope is limited to the server they were created on It can be a DES or a CES server The variable can be accessed by any rule as long as it runs on the same server 4 246 eCVeNtT 24x7 Universal Universal Variables can be accessed by any rule that runs on any server in the Event24x7 cluster Persistence Guarantees that the variable s value is saved in a file every time the SET command is executed This is done to ensure that the variable s value is not lost upon restart of the Event24x7 Application Details Add a User Variable and set it s value If the variable doesn t exist Event24x7 will add it If it already exists a new value is set When a Global variable is set the variable can be viewed from the Variable Status screen See Special Variables and Variables Status sections Example For cases that a counter is required To increase such a counter the user must enter the following data in the screen above Name COUNTER Value 1COUNTER 1 Scope Local The Name field doesn t contain the sign Event24x7 knows that it s related to User Variables The Value field must contain the 1 to tell Event24x7 to take the current value of the Local User Variable COUNTER and increase it by one Event24x7 User Manual Version 8 1 05 4 247 CVCNT24x7 4 3 65 Set Parameter Set Parameter Directly Session name o l Parameter name
126. MAIL Boman DES Nare E LINUX E MODEM Description Local DES m 2 SNMP E TCPIP E unix A UserExperience At REMOTE DES 0 Enable i Disable Statistics Created 2006 11715 1415 Changed 2014 05 04 11 22 By EVENT if New ie Delete af Apply Status The configuration screen left pane contains the DES s list and its Sessions The right pane of the screen defines the highlighted DES or Session s parameters Event24x7 User Manual Version 8 1 05 3 34 event 24x7 Selecting an object Des or Session and pressing the right mouse will open a pop up window with the DES or Session actions DES menu Session menu Rename 1 Copy Export Rename Delete Move Disable All Sessions Delete Enable All Sessions Export Skeleton Handling Event24x7 User Manual Version 8 1 05 3 35 event 24x7 3 1 2 1 General Tab ac niom E Database DES Mame LOCAL DES Description Local DES Enable Disable Status Statistics Created 2008 11 18 12 19 Changed 2014 05 04 11 22 By EVENT DES Name Unique identifier of a DES Description User s description of the Distributed Event Server Status DES status Enable instructs Event24x7 to establish communication with the DES and get the messages from the session attached to this DES Disable instructs Event24x7 not to establish connection with this DES Created Creation date of the DES Changed Date of last changed By Name of the
127. MOTE DES Details There are no specific rules how to use Name Parameters and Directory It is similar to using Win32 API CreateProcess Example Run program check_instant_messages Type serial Wait 2 minutes Event24x7 User Manual Version 8 1 05 4 235 event 24x7 4 3 54 Program As User Purpose Fields Program 43 User Account Aol Profile Proxy Use Gateway Server for 2008 Server Curent Server h Run a program under a specific user credentials When a program must be started with a certain user credentials like a program that reads from SQL and the SQL authentication is Login User Program Name and path of the program Parameters Run time parameters for the program Directory Directory path User User name Password Password Domain Network Domain name Restore Option to restore the User profile Server Event24x7 server upon which to start the program This is transparent the program execution within its own servers Event24x7 User Manual Version 8 1 05 4 236 event 24x7 4 3 55 Remove Rule REMOVE RULE Server FES SERVER s Purpose Remove single Rule or Group of Rules from the Rule System Fields Group Rule Group s name Rule Rule name If the Rule name s field remains empty the action removes the entire Group Server The Event24x7 s server from which to remove the rule Details Remove the rule or the entire Group from the Rules Active list This will prevent the removed rules fro
128. MP Mib Trap SNMP Send Trap Send a simple SNMP Trap Table Talk Ability to manage dynamic arrays in memory on the fly Tecpip Send a TCP IP packet to host Terms Add or delete a term Text in Screen Find a specific text on the console screen User Exit Execute a user defined DLL or DLL process Voice Start Event24x7 IVR request While Open DO WHILE statement The Action Tab may contain any number of action commands Execution of the commands is done sequentially from the first to the last Using Event24x7 Variable in Action When adding actions in Action You can use Event24x7 System variables prefix of and global User variables prefix in the parameters See Special Variables section for more details When the parameter executes the Action Tab Statements it first checks whether the statement contains Event24x7 variables If it does it first changes each variable to the correct value and only then executes the action 6 9 7 1 Action NotRunning Action NotRunning tab will be executed if the collector didn t finish its execution properly There cases where the collector is not configured properly and could not finish correctly In these cases the parameter will get a NotRunning state and Action NotRunning tab will be executed Once the collector will run again and get a normal result the parameter state will be change accordingly Event24x7 User Manual Version 8 1 05 6 471 CVeNT 24x7 6 10 Action Param
129. N THE PRODUCT S AND OR THE PROGRAM S DESCRIBED IN THIS PUBLICATION AT ANY TIME OpenSSL LICENSE ISSUES COPYRIGHT C 1998 2003 THE OPENSSL PROJECT ALL RIGHTS RESERVED THIS PRODUCT INCLUDES SOFTWARE DEVELOPED BY THE OPENSSL PROJECT FOR USE IN THE OPENSSL TOOLKIT HTTP AWWW OPENSSL ORG THIS PRODUCT INCLUDES CRYPTOGRAPHIC SOFTWARE WRITTEN BY ERIC YOUNG EAY CRYPTSOFT COM THIS PRODUCT INCLUDES SOFTWARE WRITTEN BY TIM HUDSON TJH CRYPTSOFT COM OPENSSL SOFTWARE IS PROVIDED BY THE OPENSSL PROJECT AS IS AND ANY EXPRESSED OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OP MARKETABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE OPENSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Net SNMP LICENSE ISSUES Part l CMU UCD copyright notice BSD Jake CMU AND THE REGENTS OF THE UNIVERSITY OF CALIFORNIA DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS IN NO EVENT SHAL
130. Options Dialing Rules Modems Advanced x The following modems are installed Attached To amp standard 56000 bps Modern COMB F Telit HS0FA USE Modem Not present Event24x7 User Manual Version 8 1 05 9 606 event 24x7 9 1 2 Testing the modem Select the modem and open the Properties gt Diagnostics tab Use Query Modem button and verify that the modem answers successfully Standard 56000 bps Modem Properties General Modem Diagnostics Advanced Driver Modem Information Field Value Hardware ID moto gen Command Response ATOOVIED AT GhM AES F AT FCLASS 7 01 8 ATHCLS 7 COMMAND NOT SUPPORTED AT GCI C 59 Logging Apend to Los Event24x7 User Manual Version 8 1 05 9 607 event 24x7 9 1 3 Enable Notification Center Enabling the Notification Center is done from DES Configuration Notification Tab Remember Notification is at DES level Use Notification Center SMS Sending Order Target Executing SMS First attempt 9 Wireless Modem kloder Third attempt 5M5 Provider Provider SMS Sending Order e There are three ways to send SMS Wireless Modem Mail SMS Provider e Set the way to send SMS in each retry for every recipient Target Executing SMS e By default SMS would be sent with local Notification Center e If you don t have wireless modem at current DES you can redirect the sending to other DES Event24x7 User Manual Version 8 1 05 9 6
131. P Mib Interactive Send or Get or Set SNMP requests for SNMP objects SNMP Mib Trap Send a SNMP Mib Trap SNMP Send Trap Send a simple SNMP Trap Table Talk Ability to manage dynamic arrays in memory on the fly Tcpip Send a TCP IP packet to host Terms Add or delete a term Text in Screen Find a specific text on the console screen User Exit Execute a user defined DLL or DLL process Voice Start Event24x7 IVR request While Open DO WHILE statement The Rule may contain any number of action commands Execution of the commands is done sequentially from the first to the last Using Event24x7 Variable in Action Event24x7 User Manual Version 8 1 05 4 180 event 24x7 When adding actions in Action You can use Event24x7 System variables prefix of and global User variables prefix in the parameters See Special Variables section for more details When the rule executes the Action Statements it first checks whether the statement contains Event24x7 variables If it does it first changes each variable to the variable value and only then executes the action 4 3 Action Parameters for Rules 4 3 1 Activate Downtime ACTIVATE Downtime Name Po Time End Minute after starting C Specific Time Start Time Downtime starts when rule is executed Set time in Purpose Activate predefined Downtime Fields Name Name of a Downtime object Time End Number of minutes after starting or a specific time Details D
132. PLICATION LOG RECORD IB BOOT IB COMMAND IB CONSUMING PROCESSES IB DATABASE IB DEBUG IB DISK SPACE IB EXISTENCE IB HANDLING DIRECTORY IB HANDLING FILE IB HTTP IB MEMORY IB NT LoG WATCH IB PERFORMANCE MONITOR IB PERFORMANCE VB SCRIPT IB PING IB PORT SCAN IB PROCESS IB RESOURCES IB SERVICE IB USER FOLDER WATCH IB USER LOG WATCH IB WMI COMMAND DIRECTORY WATCH FILE HANDLE Event24x7 User Manual Version 8 1 05 4 244 4 245 4 246 4 248 4 249 4 251 4 251 4 252 4 253 4 254 4 255 4 256 4 25 7 4 258 4 259 4 260 4 261 4 262 4 263 4 264 4 265 4 266 4 270 4 270 4 271 4 272 4 273 4 274 4 275 4 276 4 27 4 278 4 279 4 280 4 281 4 282 4 284 4 285 4 286 4 28 7 4 288 4 289 4 290 4 291 4 292 4 293 4 294 4 295 CVeENT 24x7 4 6 26 FILE FIND 4 7 TEMPLATES DEFINITION 4 7 1 AUTOMATIC LOGIN 4 7 2 TABLE LOOKUP 4 7 3 MAILSTATUS DATA 4 7 4 PRINTER STATUS DATA 4 7 5 MAILING LIST 4 7 6 SMS WIRELESS 4 7 7 REPOSITORY 4 7 8 DOWNTIME 4 8 VOICE DEFINITION 4 8 1 DIAL 4 8 2 END VOICE 4 8 3 GET DIGITS 4 8 4 GOTO LABEL 4 8 5 HOOK OFF 4 8 6 HOOKON 4 8 7 IF DIGITS 4 8 8 LABEL 4 8 9 PLAY 4 8 10 RECORD 4 8 11 SLEEP 4 8 12 SPEAK 4 9 MIB DEFINITION 4 9 1 GENERAL TAB 4 9 2 OBJECT 4 9 3 TRAPS 4 10 SERVICE DEFINITION 4 10 1 GENERAL TAB 4 10 2 WHAT TAB 4 10 2 1 Monitor Parameter 4 10 2 2 Parameter 4 10 2 3
133. POST commands internally External WGet exe Event24x7 executes the WGet utility All the WGet options are available Server s IP to check or the command line for WGet Optional Not Found string that is returned from the web server It enables Event24x7 to indicate a Not Found page Optional A string to locate in the return answer from the web server If this option is used the last line of the intermediate file returned from the collector contains an indication if all strings were found List line has the format of gt gt Result OK Size 1 Set SUCCESS 4 125 event 24x7 4 1 4 3 6 Command Purpose Specify command or request to execute Fields Command The command s content should be adjusted to the target environment It can be WMI command or SSH command Session Select on which session to apply the command 4 1 4 3 7 Command Special Purpose Send a special command to a monitored session Fields Command Choose a command to send from these available options ENTER TAB RESET HOME NEWLINE Blank BREAK EOF and a set of Control Key commands Session The session to which the command is sent to Event24x7 User Manual Version 8 1 05 4 126 event 24x7 4 1 4 3 8 Server Command Purpose Send Event to Focal Point Fields Message The message to send Server CES or DES Details This is the Event24x7 command line On the CES you can type any command at the Focal Point window that might trigg
134. R lt stringl1 gt lt from gt lt Length gt a Return the substring of string1 If length less than 1 it returns the end of string1 STRLEFT usage STRLEFT lt string1 gt lt Length gt aa Return the prefix of string1 STRRIGHT usage STRRIGHT lt string1 gt lt Length gt en Return the suffix of string1 Event24x7 User Manual Version 8 1 05 17 703 CVeNT 24x7 17 3 6 Count Occurrences in State Count Occurrences of Parameter state during time from the CSV COUNTSTATE lt session gt lt parameter gt lt minutes gt lt count type gt For example COUNTSTATE AGENT CPU 5 1 session Session Name parameter Parameter Name Minute to search the CSV count type What type of state we want to count Options e 0 OK 1 Warning Only 2 Warning and Above 3 Error Only 4 Error and Above 5 Severe Only Event24x7 User Manual Version 8 1 05 17 704 event 24x7 18 Packaging User Solutions 18 1 General Event24x7 comes with several pre defined solutions like Oracle SQL and Exchange etc The same mechanism is opened for the users to package their own solutions A User solution might be built from the following components O O O O O Monitors Collectors Parameters Rules IBs In addition there 1s a control file that combines all the components to a single solution 18 2 Creating A User Solution Follow these steps to create A User solution e Create the solution with the
135. S 0 Send to CES Flle Watch C Don t Send to CES Purpose Locate files at the specific folder and watch for data added Fields Folder Name Name of the folder Prefix Prefix of the files Only file with the identical prefix name will be monitored Extension Extension of the files Only file with the identical extension will be monitored Selection Operation 2 possible options Start and Stop The default is Start If you want to stop tracking a file choose Stop File Watch A checkbox indicating if you can see changes in the file s specified above reflected at run time in the FileWatch Control screen If ticked then yes Identify The Identify for the monitored files will be the file name itself without the extension Event24x7 User Manual Version 8 1 05 6 429 event 24x7 6 7 2 3 Event Log Windows Event Log Event fle Application Operation Start File Watch Send to CES O Send to CES Flle Watch 0 Don t Send ta CES Fields Event file Type of Event Viewer logs you want to track for any modification Possible values are Application Security Directory Service DNS Server and File Replication Service Operation 2 possible options Start and Stop The default is Start If you want to stop tracking a file choose Stop File Watch A checkbox indicating if you can see changes in the file s specified above reflected at run time in the FileWatch Control screen If ticked then ye
136. S one at each region Each one handles all the computers in its region In this way there is no need to send everything to the CES over the network The job is done locally at the DES level Besides the performance issue this solution has another important advantage of surviving DES can continue to operate even when the connection to the CES is lost It is preferred that all message processing will be done locally at the DES level rules therefore messages are not forwarded from DES to CES rule processing system by default Rule processing on CES should be reserved to messages and events that need a global view of the managed environments In order to achieve this functionality Event24x7 provides a special DES to CES event mechanism overriding the message being forwarded and suppressing unnecessary messages at the rule and session levels Event24x7 User Manual Version 8 1 05 1 26 event 24x7 1 7 Event24x7 Monitoring Architecture Event24x7 solution provides 3D monitoring architecture by having monitoring definitions at all three dimensions It increases productivity by easily defining sophisticated monitoring statements at every point along the flow of the monitored object 1 7 1 Vertical Axis Physical Structure Fundamental capabilities of Event24x7 to monitor the entire environment like Servers Networking objects Databases etc Use File Watch Manage by Exception Pro Active and IB Agents monitoring methods to monitor and perfor
137. SNMP Engine Get specific OID value SAMP Mib Get Target MONITORFIELD OlDs 1 3 6 1 2 1 1 3 0 O EE YETSIOn 1 Community t hMOMITORFIELD2 Target OID Version Community Engineld Username Auth Password Enc Password Event24x7 User Manual Version 8 1 05 a Target address Can also be an Event24x7 variable that holds the target address OID to get its value 2 fields SNMP version 1 2c or 3 Community 6 397 event 24x7 6 5 4 1 23 SNMP Mib Get Table New SNMP Engine There are OIDs entries that have an internal table structure In the MIB it appears line after line Event24x7 knows to read the values and list them in a tabular format SAMP Mib Get Table Target SEHMONITORFIELD1 OID Index Add Index to results Versione 1 Community tt hMOMITORFIELD2 Target Target address Can also be an Event24x7 variable that holds the target address OID OID to get its value 2 fields Index Check to add index field to the results Version SNMP version 1 2c or 3 Community Community Engineld Username Auth Password Enc Password Event24x7 User Manual Version 8 1 05 6 398 Telnet TELNET Target Fort Type Telnet User O Password 000 Command Check Telnet connection to Host Can be used to check 1f SMTP port 25 is open Event24x7 User Manual Version 8 1 05 6 399 event 24x7 6 5 4 1 24 Use External Use External Values
138. SYSTEM MANAGEMENT 15 1 1 SERVICES TAB 15 1 1 1 Service Operation 15 1 2 PROCESSES TAB 15 1 2 1 Process Operation 15 1 3 SOFTWARE TAB 15 2 DATABASE MANAGEMENT 15 2 1 QUERY TAB 15 2 2 RESIZE TAB 15 2 2 1 Resize Operation 15 2 2 2 Adding Data file Operation 15 2 3 JOB TAB 15 2 3 1 Jobs Operation 15 2 4 SESSIONS TAB 15 2 4 1 Process Operation 15 2 5 ROLLBACK TAB 15 2 5 1 Rollback Operation 15 3 SNMP MANAGEMENT 15 3 1 HANDLING OIDs 15 4 FILEWATCH CONTROL 15 4 1 FILE ICON STATUS 15 4 2 OPENING THE FILE VIEWER 15 4 3 FILE VIEWER 15 4 3 1 File Viewer setup 16 EVENT24X7 VARIABLES 16 1 USER VARIABLES 16 1 1 USER VARIABLES RESOLUTION SEARCH ORDER 16 2 SYSTEM VARIABLES 16 3 INFORMATION BASE VARIABLES 16 4 PERFORMANCE VARIABLES 16 4 1 SYSTEM VARIABLES 16 4 2 SYSTEM HTML MAILS VARIABLES Event24x7 User Manual Version 8 1 05 1 17 13 664 13 665 14 666 14 667 14 667 14 668 14 668 15 669 15 670 15 671 15 671 15 672 15 672 15 673 15 674 15 675 15 676 15 677 15 678 15 679 15 679 15 680 15 680 15 682 15 682 15 683 15 684 15 685 15 686 15 686 15 687 15 688 16 689 16 689 16 689 16 690 16 692 16 693 16 693 16 695 event 24x7 16 4 3 SYSTEM EVENT VIEWER VARIABLES 16 4 4 SYSTEM DOWNTIME VARIABLES 17 PERFORMANCE VARIABLES FOR MULTIPLE VALUES 17 1 1 USER VARIABLES FROM SESSION DEFINITION 17 1 2 USER VAR
139. Send multiple recipients at same message mi Delimiter F Command c test smsbox exe T0O SSAMESSAGE FTP File SNMP Trap TCPIP User Name Password From Prefix From Choose SMS type Command FTP File Your user name for the SMS provider account Your user password Sending number prefix Example 050 Sending number Example 1234567 Choose sending method Options are SMS API Default Command Command Line or Process VB Script Execute VB or VBS script FTP Put a file with FTP The command to execute when sending SMS The following System Variables with are allowed EVENTINSTALL USERNAME PASSWORD FROMPR FROM TO MESSAGE SMS file structure Select the structure of the file containing the details of the SMS The following System Variables with are allowed FTPFILE FROMPR FROM TO MESSAGE Event24x7 User Manual Version 8 1 05 3 103 event 24x7 3 9 Studio Configuration The Studio Configuration feature allows you to change the appearance of your local Studio display Stir Gontgura Gon E3 Display Properties d Alerts Display Open automatically a Runtime 4 Startup Operation Properties Program User Defined Create Log file i Suppress display logo o 32 cw om Ow De Ba ct 3 9 1 Display Tab View Option Choose the Studio background view Solid Color The background will have a solid color Gradient The background will have gradient effect Dire
140. TION 6 3 1 ADDING A NEW OBJECT 6 4 MONITOR DEFINITION 6 4 1 GENERAL TAB 6 4 2 FIELDS 6 5 COLLECTOR DEFINITION 6 5 1 GENERAL TAB 6 5 2 WHEN 6 5 3 DEPENDENT 6 5 4 EXECUTION 6 5 4 1 Collector activities 6 5 4 1 1 Disable When 6 5 4 1 2 Empty 6 5 4 1 3 ADSI Command 6 5 4 1 4 Bandwidth Utilization Event24x7 User Manual Version 8 1 05 1 10 5 335 5 335 5 336 5 337 5 339 5 340 5 341 5 341 5 342 5 343 5 343 5 344 5 344 5 345 5 346 5 347 5 348 5 349 5 350 5 351 5 352 5 353 5 355 6 357 6 357 6 359 6 359 6 360 6 360 6 360 6 361 6 363 6 364 6 366 6 368 6 369 6 371 6 373 6 374 6 37 5 6 377 6 37 7 6 37 7 6 378 6 378 event 24x7 6 5 4 1 5 Command 6 5 4 1 6 Copy Parameter 6 5 4 1 7 CPU Usage 6 5 4 1 8 Database 6 5 4 1 9 DES Command 6 5 4 1 10 6 5 4 1 11 6 5 4 1 12 6 5 4 1 13 6 5 4 1 14 6 5 4 1 15 6 5 4 1 16 6 5 4 1 17 6 5 4 1 18 6 5 4 1 19 6 5 4 1 20 6 5 4 1 21 6 5 4 1 22 6 5 4 1 23 6 5 4 1 24 6 5 4 1 25 Exchange Inbox File File Excel File Size HTTP Performance Monitor Ping Ports Scan PowerShell SNMP Get SNMP Get List SNMP Get Table SNMP Mib Get New SNMP Engine SNMP Mib Get Table New SNMP Engine Use External VMware ESX 6 5 4 1 25 1 List of ESXs 6 5 4 1 25 2 List of Guests 6 5 4 1 25 3 List of Parameters 6 5 4 1 25 4 Parameter Values 6 5 4 1 25 5 Pa
141. Tab Automatic Notification when starting Downtime Handle Start Downtime Emails Mail To yoayltniggerplus com Mailing List Subject Message Type None Default hi me URL Enabling the Automatic Start Downtime Mail sending Handle Start Set this field to activate the Automatic Start Downtime Downtime Emails Mail sending Mail To Set the mail recipient Mailing List Set this field to send the mail to a mailing list In this case the Mail To field points to a Mailing List that is defined at the Script definition Subject The text that will be added to the subject of the message Message The text that will be added to the body of the message Server Select server for the mail to be sent from Event24x7 User Manual Version 8 1 05 13 663 event 24x7 13 6 End Downtime Mail Tab Meal To aa Mailing List Subject Message Type None Default hi mee URL Enabling the Automatic End Downtime Mail sending Handle End Set this field to activate the Automatic End Downtime Downtime Emails Mail sending Mail To Set the mail recipient Mailing List Set this field to send the mail to a mailing list In this case the Mail To field points to a Mailing List that is defined at the Script definition Subject The text that will be added to the subject of the message Message The text that will be added to the body of the message Server Select server for the mail to be sent from Event24x7 User Manual Version 8 1 05
142. To CC BCC Email addresses Subject Message Event24x7 User Manual Version 8 1 05 Email subject Email content 6 516 event 24x7 Attachment Optional attached file Server The mail server name Details Email is sent automatically In order to send mail two prerequisite terms must be set e Event24x7 must have an Internet connection e Enable Mail and the other Mail parameters must have been set successfully This is done from the Server Configuration screen See Mail section Event24x7 User Manual Version 8 1 05 6 517 event 24x7 Mail Status Aun Script DES Traget 000 O Shout Hours When last sample rot in range Filter F Mail Wailing List Purpose Verify that the Parameters executed Produces mail report that highlight parameters that were not executed during tested period of time Fields Mail Status Script Entry from Script Definition that contains control definition for the result DES Target DES server name that printers related to it Shout Hours Highlight parameters that were not executed during the tested time Filter Filter the target parameters for the report Mail To Mail Target Mailing List Whether to use Event24x7 mailing list Server Event24x7 s server that will send the mail Event24x7 User Manual Version 8 1 05 6 518 event 24x7 6 10 48 Notification Acknowledgement Notification Acknowledgement Purpose Set Notification Acknowledgment for a par
143. Y OUT OF THE USE OF THIS SOFTWARE EVEN ILF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Event24x7 User Manual Version 8 1 05 24 729 event 24x7 Part 7 Fabasoft R amp D Software GmbH amp Co KG copyright notice BSD THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Part Gs Apple Inc Copyright notice BSD THIS SOFTWARE ITS PROVIDED BY APPLE AND ITS CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF
144. Y THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Part 6 Cisco BUPINIC copyright notice BSD THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WA
145. a con Change Enable E PortsTCP C Disable Statistics Proces F ates Created 2014 04 28 09 36 m E SMARTPredictedFailure Changed 2014 05 26 2253 By EVENT 4 Uptime WebAccess The highlighted icon Indicates Pro Active The Monitor screen has two parts e Monitor List The monitor list is located at the left pane of the screen and displayed in a tree structure It contains the list of the all the defined Monitors organized by groups A group is a logical unit sharing some common content for the monitors within this unit e Definitions tabs The monitor definition tabs are at the right side of the screen Event24x7 User Manual Version 8 1 05 6 364 even C 24X This section remains blank if you select a group from the Monitor List but shows detail for a Monitor Monitor screen operation buttons DES DES Activates the selected monitor at the appropriate DES Server of the monitor s session and all the objects related to this monitor Collectors and their Parameters Event24x7 activates the monitors automatically when the session becomes active When you change a monitor s definition and you want the changes to become effective immediately the Activate button sends the newly defined monitor to the correct DES New tf New Add a new Monitor Opens the definition tabs for entering a new monitor Delete Ee Delete Delete the selected monitor Apply iL Apply Save last changes in th
146. a StartLogTest ta StartLogWatchi H H SAMPLES ere a STARTUP eBscriphion TEST H UNIX Frioriky Search Stop On First Order Disable Session Mame ALL F Type ALL Oo Statistics Created 2004 04 71 11 48 Changed 2074 05 11 11 34 By EVENT CES pes Ef New EX Delete Mlapply De IML Apply The Rule screen has two parts e Rules List The Rules List is located at the left pane of the screen and displayed in a tree structure It contains the list of all the defined rules organized by groups A group is a logical unit sharing some common content for the rules within this unit e Definitions tabs The rule definition tabs are at the right side of the screen This section remains blank if you select a group from the Rules List but shows details for a Rule Event24x7 User Manual Version 8 1 05 4 158 event 24x7 CES CES Activate the selected rule on the CES Server Rules that have been defined are not part of the rule system until they are Activated The activate process reads the rule from the file into the memory of the Rule System Rule screen operation buttons DES DES Activate the selected rule on DES s servers If the defined rule has a specific session name then it automatically sends it to the relevant DES If the session name is defined as ALL a Popup dialog will show a list of DESs to chose from You can select multiple DES servers as the target New td New Add a new Rule Opens the definition ta
147. ab is used to define operations that trigger a rule Session Operation Details L Session 4GENTLESS A Session Session Session Relation Equal The Session that caused current state AND What consists of one or more operations with an AND OR NOT relationship A Rule is triggered if the operations criteria of the What are met Available operations Monitor Action based on the Monitor Parameter Action based on the Parameter Session Action based on the Session Service Action based on the Service itself To add an operation choose from the pull down combobox Monitor Parameter or Session The window on the right hand side will change according to your selection Press the button to delete the selected operation Press the buttons to move the selected operation up or down Event24x7 User Manual Version 8 1 05 4 321 event 24x7 4 10 2 1 Monitor Parameter Monitor Montor o Relation Not Equal l m The Monitor that caused current skate AND Purpose Perform action based upon the Monitor that caused the Service state to change Fields Monitor Monitor name that causes the state change Relation Equal or Not Equal the Monitor name Event24x7 User Manual Version 8 1 05 4 322 event 24x7 4 10 2 2 Parameter Parameter Relation Mot Equal The Parameter that caused current state AND Purpose Perform action based upon the Parameter that cau
148. ails Manage Emails with IMAP4 protocol The email s From and Subject fields can be intercepted by Rules Every read mail is automatically deleted by Event24x7 Settings Sever imap gmail com UserName srnith igmail corn Passiord Inbos inbox Fort 443 Interval Minutes Secure SSL Terminal Size 24 80 Server IMAP4 server name User Name Mail address Password The User s password Inbox Inbox folder name The default name is inbox Port Default IMAP4 SSL port is 993 Interval Interval for check mail cycle Secure Chose the secure option None SSL or TSL Terminal Size Screen size rows by columns Event24x7 User Manual Version 8 1 05 3 58 Cm ae event 24x7 RS 232C for Serial connection Settings Pork Baud Rate 56 000 Data Bit Flow OTR OSA Y AON AA0FP Terminal Size 24 80 Port Baud Rate Parity Data Bit Stop Bit Flow Terminal Size Serial port number Speed of connection Choose none even mark odd or space Serial data format may contain five to eight data bits One two or one and a half stop bits may be used in the serial data format Check appropriate box DTR DSR Data Terminal Equipment to Data Communications Equipment RTS CTS Request To Send Clear To Send XON XOFF signaling Screen size rows by columns Event24x7 User Manual Version 8 1 05 3 59 event 24x7 Manage networking equipment like Router Switches hu
149. al Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Internal Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session Session status status status i status i status i status i status i status i status i status i status i status i status i status i status i ERRO Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not Not R Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Active Perf Ping BG36B_A PING to 192 168 166 31 is ERROR f Ping LE2 PING to 192 168 166 111 is ERROR Internal Session status is Not Active Internal Session status is Init Internal Session status is Not Active Internal Session status is Init Oracle Pointer_clust Oracle Pointer_clust Probe_8 BP_H Probe 8 BP_H Command Focal Point Screen Toolbar has setup screen and history A clock on the upper right h
150. al Version 8 1 05 6 441 vent 24x7 6 9 3 Create Tab This tab creates a new value for the parameter from the collector s output Not all fields are displayed Only the fields selected here are displayed te Fields Type Columna Oecurence Single value Single Field Tue Multiple values Multiple Fields Tene Starting Tips one Ending Line Parsing Option Ignore String Type Continue nest line search a Fields Pattern Handling Existence Post Process Fields Names Start After End ari nee o None o o IC Fields Hame JE i Free Deliniters ACEPIION ize CSW File format Selection y leave empty ii for default Criteria In this tab we tell Event24x7 how to map the intermediate file that was created by the Collector Value The type of the parameter Type e Single value keeps only a single parameter value If you know the exact line number of the value in the intermediate file specify it in the Line field This value prevents the need for searching the entire intermediate file line by line e Multiple values lets you keep multiple values for a single execution Event24x7 has specific commands to handle a list of values For more information please refer to the Performance variables for multiple values chapter Event24x7 User Manual Version 8 1 05 6 442 Occurrenc e Starting Ending Value Pattern Fields Pattern Exception event 24x7 Set the number of occurrence
151. alf an hour Event24x7 User Manual Version 8 1 05 6 478 event 24x7 Charts Session name Parameter name Chart Type Chart Size MHH Date Type From Range Hours Remind Aggregation Auto Title Compare Purpose Create a chart for a Parameter Fields Session name Session name of the parameter Parameter name Parameter name Chart Type Chart type Line Pie Bar Chart Size WxH Chart size Width Height Output Directory Output directory for the chart file From Starting date and time Range Hours The number of hours from the first sample tills the last Rewind the number of days to rewind for the comparison entry Aggregation Aggregation mode Auto Hour Day Week Month Title Chart s title Details The Charts function creates a chart for a selected parameter Event24x7 User Manual Version 8 1 05 6 479 event 24x7 6 10 9 Check Thresholds Check Thresholds Content Relation Warning Error DEVETE Content Purpose Change the state dynamically Fields Content Field name from the Create Tab Relation Relation to compare Duration Duration in milliseconds of the sound Details Take the value of Content field and compare it to the specified threshold Set the Parameter state according to the Relation and the thresholds Event24x7 User Manual Version 8 1 05 6 480 event 24x7 6 10 10 Clear Text The command has no dialog Purpose Clear the context of the session s
152. alil Mail from E ventada Color Message O ba Test Me Background Suppress original message A Pull down menu allows for a selection of activities Activate Downtime Activate predefined Downtime Activate IB Activate Information Base at a remote session Activate Rule Activate a rule or group at Event24x7 s server Activate Workflow Activate a Workflow Alert Open new Alert at the alert windows Backup Automatic backup of the User configuration files Beep Generate a Beep sound Case Add a CASE line to the SELECT statement Check Thresholds Check values against thresholds Clear Text Clears the text in current line Command Issue a command to the session Command DOS Issue a DOS command Command PsExec Issue a PSExec command on remote computer Command Special Send special character keys to a session Enter Tab Reset home New line CTM Condition Handle CONTROL M conditions Event24x7 User Manual Version 8 1 05 4 178 CTM Jobs CTM Load set CTM Resource CTM Shout Display Else Else Object Else Parser Exit Rule File Copy to Server HTTP IB Application Log Record IB Boot IB Performance IB Performance VB Script IB Process IB Resources IB Service IF IF Object IF Parser Log Event24x7 Log User Mail Mail Status Run Notification Center Notification Enable Disable Notification SMS Immediate Parse File and Set Event24x7 User Manual Version 8 1 05 event 24x7 Orders
153. alue to IB Session AGENT z Purpose Send User Variable From CES to DES or from the DES to the RES Fields Name Variable name Do not prefix the name with Value Variable value Session Agent name running on the RES machine Details Mechanism to pass values from CES to DES or to any one of the RESs The User Variable will have the Server scope at the RES side Event24x7 User Manual Version 8 1 05 4 242 event 24x7 4 3 61 Server Command Send Event to Server Server CES Server Purpose Send Event to Focal Point Fields Command command Server CES or DES Details This is the Event24x7 command line On CES you can type any command at the Focal Point window that might trigger What Command rule Actually only CES has real Focal Point window The Server Command lets you act like each DES has a virtual Focal Point as a command line Same rule with What Command active at DES will be triggered upon this Event Event24x7 User Manual Version 8 1 05 4 243 event 24x7 4 3 62 Server Parameter Send Parameter to DES Filename O00 DES Serer LOCAL DES Purpose Let Collector use values gathered by Rule Fields Line Line that contains the parameter s values File name The values are created as a file that the collector can use Specify this same name when you define the collector that uses the Line DES Server DES name that will receive the Line Details This command is used as a bridge with the Par
154. ame computer The email s From and Subject fields can be intercepted by Rules Settings Profile Delete Delete mail after read Interval Minutes Terminal Size 24x 80 Profile Profile name The profile name that is used by the Exchange can be located at Program gt Control Panel gt Mail and then open Show Profile Password Optional Password Delete Tick this field 1f you want Event24x7 to delete read mails Read mails will be marked as read and not read by Event24x7 anymore Check Alive Tick box if you wish to check if host is alive Interval Interval for check mail cycle Terminal Size Screen size rows by columns Event24x7 User Manual Version 8 1 05 3 56 event 24x7 3 1 3 2 2 7 POP3 Connection for Emails Manage Emails with POP3 protocol The email s From and Subject fields can be intercepted by Rules Every read mail is automatically deleted by Event24x7 Settings Sener pop gmail com UserName emithtigmail corn Pazzword Fort 995 Interval Minutes Secure v Secure Sockets Layer 55L Terminal Size 24 al hi Server POP3 server name User Name Mail address Password The User s password Port Default POP3 port is 995 Interval Interval for check mail cycle Secure Tick the secure field to use SSL connection Terminal Size Screen size rows by columns Event24x7 User Manual Version 8 1 05 3 57 event 24x7 3 1 3 2 2 8 IMAP4 Connection for Em
155. ame for the entire string in the entire file file Delimiters List of characters that are used as delimiters between the input fields Leave empty for default Variable Names The variable names Start After An Event24x7 search for the prefix and it creates a variable from the value that appears after this prefix Event24x7 User Manual Version 8 1 05 4 228 event 24x7 Event24x7 User Manual Version 8 1 05 4 229 event 24x7 Parse Input and Set Parameters Variables Names Start After Set Parameters Single parameter Session i Parameter State OK Purpose Convert single message to parameters When the incoming message has an internal structure of Keyword Value Keyword Value With this command you can create Event24x7 variables automatically In addition the variable can be sent to Parameters Fields Variable Names Provide the prefix and the parameter name Start After An Event24x7 search for the prefix and it creates a variable from the value that appears after this prefix Set Parameter Send the variables to Parameters Dashboard Single Parameter If checked Event24x7 will send each variable separately to the parameters Event24x7 User Manual Version 8 1 05 4 230 CVENT 24x7 4 3 49 PING FING C ICMP Method Socket Address Purpose Perform Ping checks to a TCPIP address Fields Address TCPIP address to check Format of IP is nnn nnn nnn nnn or DNS name Detail
156. ameter Fields Session Select session for the parameter Parameter Select the parameter User Name User Name Details This is part of the Notification System It uses to Acknowledgment via emails There are two ways to get an acknowledgment By the SMS or by mails Event24x7 User Manual Version 8 1 05 6 519 event 24x7 6 10 49 Notification Center Notification Center Mode Complete Acknowledgemer Group Marne Uperators Sending Under Use Group Default Notify Order Use Group Default Override Message DES Server LOCAL DES Purpose Use Notification Center to handle the alert Fields Mode Sending mode Available options Complete Acknowledgement Broadcasting Group Name Group name for sending the notification to its recipients Sending Order Sending order Available options Use Group Default According to On Duty Calendar According to Weekly Calendar Recipient Order Send to all Simultaneously Event24x7 User Manual Version 8 1 05 6 520 event 24x7 Notify Order Notify order Available options Use Group Default Only mails Mails and SMS Only SMS Start mail Retries SMS Start mail Escalation SMS Details Sending notifications using Notification Center Event24x7 User Manual Version 8 1 05 6 521 event 24x7 6 10 50 Notification SMS Immediate Hotification Center SMS immediate Type SMS Provider Message G ewer Curent Server Purpose Send immediate SMS Fields Type Options
157. ameter Name parameter name For Multiple Fields only Object you want to remove from the result For Example FreeSpace produces an error on some Swap drive you want to remove from the results Event24x7 User Manual Version 8 1 05 6 443 Handling Existence Delimiters CSV File Format Ignore String Continue next line search event 24x7 Define the value that will be written into the intermediate file according to the parameter s existence None Work according to a Pattern If no value was gathered no entry will be added to the parameter s value 0 No Data 1 Data exist If no value is gathered it will add no data was found as the parameter s value 0 No Data Nothing if Data Exist Set State Default State Force the state to be the default one Set State Default State Force state to be default Force Force Action execution of the action that is performed when at default state Set State Ok Warning Force the state to be one of them Error or Severe List of characters that are used as delimiters between the input fields Support handling of files in this format If we are working in PowerShell not WMI and we want to create a file to store the results it must be in CSV format Search this string at each line If exist replace it with a single blank For multiple values If the values are split into several lines continue searching for the values from the next line Event24x7 User Manual Ver
158. ameter window on the right hand side will change according to your selection Event24x7 User Manual Version 8 1 05 4 164 event 24x7 Press the button to delete the selected operation Press the buttons to move the selected Operation up or down 4 2 4 1 Alert Parameter Purpose Fields ALERT Accor Add Sessioni Severity Don t check Severity z Status Don t check Status bi Prey Status Dont check Status k AND Perform action based upon a newly created alert operation Action Alert Action operations Add Change Change or Add Delete Session Session Name Source Identify the alert s Source Rule or Performance activities Message The Alert message text Severity Alert severity Status Alert status Event24x7 User Manual Version 8 1 05 4 165 event 24x7 Prev Status Previous status Useful for performing an action when the alert was created For action Change or Add if previous status was not open it means that a new alert was created Event24x7 User Manual Version 8 1 05 4 166 event 24x7 4 2 4 2 Command Parameter COMMAND Command pO Purpose Perform an action based upon a command entered from the Focal Point command line Fields Command Command to execute Mandatory field Details What Command enables a rule to be triggered by a command entered from the Event24x7 Focal Point screen The first word typed in the command line is the command to be checked The
159. ameters system Usually the collector performs a command or action to get some object values The Server Parameter command allows use of values created by Rule in the parameters Event24x7 User Manual Version 8 1 05 4 244 event 24x7 4 3 63 Session Session Operation Restat Session AGENTLESS Purpose Stop Start Session dynamically Fields Operation Operation options e Restart If the session Active close it first Always Start the session at the end e Stop e Assure Active If the session is already Active do nothing If the session is not active perform Restart e Load session from file ses Session Session Name Details The Session command lets you Stop or Start a session from a Rule the same way as you do it from the Session Definition screen Event24x7 User Manual Version 8 1 05 4 245 event 24x7 4 3 64 Set SET Evaluate Value Local Server Scope d Universal Persistence Purpose Set value to an Event24x7 User Variable Fields Name Value Evaluate Value Scope Event24x7 User Manual Version 8 1 05 Variable name Do not prefix the name with Variable value Check this field when setting a numerical value It provides the possibility to set string fields Variable scope Local Server Local variable lives in the scope of the rule it is executing at The moment the rule processing is terminated the variable is destroyed
160. and Stored Procedure Purpose Execute database command on the monitored session for any database and any database user Fields Operation Select Database SQL Server Oracle OLE DB Oracle ODBC Server or DSN Server s IP or name Database Database name User Database user name Password Database password Command Command to perform on database Stored Procedure Indicate whether the Command 1s actually Stored Procedure Details The Database command is responsible for database manipulation activities Deleting database entries adding new ones and or using sql to retrieve selected entries Event24x7 User Manual Version 8 1 05 4 200 event 24x7 4 3 21 Display DISPLAY Display Aule is working on E TIME Color Message E F Background Suppress orginal message Purpose Display a message at the Focal Point Fields Display Message to be displayed Color Message Set the color of the message text and background color Suppress message When checked the original event message would not be displayed on the Focal Point window By default every incoming event is also displayed on the Focal Point window Details This establishes the capability for the rule to display messages on the Focal Point screen during the rule execution The Source column of the display message will be shown in this format Rule followed by the Rule name Example DISPLAY Current time is TIME Display current time on the Focal Point u
161. and side of the screen shows current date and time Toolbar setup icon allows the user to setup the date and time format Toolbar camera icon allows viewing history of messages clock will show date and time for history items Each line displayed on the Focal Point screen has three fields Event24x7 User Manual Version 8 1 05 5 330 Vent 24x7 This 1s the session name if it came from a session or the user name if the command was typed at the Command window Time Time the message arrived at Event24x7 Message The message text 5 2 1 Focal Point History Focal Point history screen lists previous records along with their time and date for easy tracking This enables the user to see all the events that occurred previously at FOCAI POME ECI AS9216 Bedok Internal Session status Probe_6 BEDOK_HM Internal Session status Probe 2 TS Slave Internal Session status i EMC 1 Internal Session status Perf Ping Probe_BP_ Perf Ping ClusterEx Perf Ping LE1 ECI_AS9216 B Internal Session status Active ECI AS9216 A Internal Session status Active Probe 1 TS H Internal Session status Active Probe 5 ALJU Slave Internal Session status Active ECI AS92116 BP Internal Session status Active ECI_AS9216 _C Internal Session status Active Probe _3_KB Internal Session status Active Probe 7 BEDOK Slave Internal Session status Active ECI AS9216 Bedok Internal Session status i Active Probe 2 TS Slave Internal Session status i Active
162. ands are executed one by one from the first to the last statement If during this process the Parameter reaches the Exit Rule line it will stop execution 6 10 30 File Copy to Server File Copy To Server Server All EventS tudio Purpose Send file to EventStudio server Fields Source File File to Send Target File File name at Target server Server EventStudio Event24x7 User Manual Version 8 1 05 6 498 event 24x7 6 10 31 File Handle File Handle Purpose Copy a file on the hard disk from one location to another or delete it Fields Name Name of the file to be operated on Type Action to perform on this file Can be one of two options Delete or Copy Copy To If selected copy this field is the destination of the copied file Event24x7 User Manual Version 8 1 05 6 499 event 24x7 6 10 321B Application Pool IB WS Aplicatian Pool Purpose Handle IIS application pool Fields Name Application pool s name Type options Start Stop Status Recycle Event24x7 User Manual Version 8 1 05 6 500 event 24x7 IB Shutdown Restart Session SGENTLESS Purpose Shutdown or restart a remote session Fields Type Action to perform on the existing session Can be one of the following Shutdown Restart or Win32 Shutdown options Session Select session on which to perform above shutdown or restart operation Event24x7 User Manual Version 8 1 05 6 501 event 24x7 6 10 34 IB D
163. arameter definition Rename an object Rename an object Affects the skeleton and the sessions Update an object in the sessions according to skeleton Delete an object on both the skeleton and the sessions Adjust sessions according the current definitions of the skeleton 10 630 Vent 24x7 11 Project Project is a new feature of Event24x7 providing an easy graphical way to create and deploy a new structure of DESs and Sessions deploy from a saved project file or save the current system configuration into project file A project file keeps all the DESs and session configurations as well as all of the monitoring definitions Using the graphical interface it is possible to attach skeletons to each session Once the project is deployed each session will be created according to its skeletons z Project Project Properties Pane 4 WINDOWS Node Caption 4 Session Enable Windows Agentless ype Windows Agent 4 Connection Windows Snmp j Server Name Networking Y Namespace UNIX Linux Authentication Snmp Credential 4 Credential Type User Name Password 4 Skeletons Skeleton 1 WIndows Event24x7 User Manual Version 8 1 05 11 631 event 24x7 11 1 Getting Started e Opening Project is done by selecting the Project Definition Definitions menu The opened window will look like this BRAA a XK BR HK Gaui veriy z Nothing s selected Windows Agentless Windows Agent Windows Snmp Netw
164. atically the Templates entries with the DES server As a result every DES has a copy of the templates Event24x7 User Manual Version 8 1 05 4 297 The Template screen has two parts e Template List The Template List is located at the left side of the screen and is displayed in a tree structure It contains the list of the all the defined Templates organized by groups which are logical units of Templates sharing some mutual content e Definitions Tabs The Template definition tabs are at the right side of the screen Template screen operation buttons New T new Add new Template It opens the definition tabs for entering a new Template Delete Fi Delete Delete the selected Template Apply Ei Apply Save last changes in the file 4 7 1 Automatic Login When Event24x7 connects to a session that requires login to gain authorization the Template performs the login automatically This eliminates the need for operator intervention to perform manual login each time the Event24x7 s session is started The Template is executed when the monitored session s status becomes Active During the Event24x7 startup process it starts the all the defined sessions If a defined session has a Login Template at Startup defined in the Session Advanced tab the Template will automatically be executed after Event24x7 establishes connection with the session The login Template is also executed when a session is restarted 4 7 2 Table Lookup Replace a nume
165. atuses on screen Event24x7 User Manual Version 8 1 05 5 350 event 24x7 5 11 Monitoring Statuses There are Statuses screens for Collector Monitor and Parameter For example the Collector Status Screen collector status trom 05 76 7014 23 19 56 E x AcENTEsSs Collector Name Description A Availableme ytes Amount of physical memory available Check if there is process consumes more then 40 CPU more then 5 minutes Check whether CPU is over 80 during two consecutive minutes Check Free Space on all Drives Memory Utilization Example how to use PerfMon from Event 4x7 Check ping address Check if Ports is in Listening mode Check Process existance Check service existance Check Free Space on all Drives Check Computer UpTime Example of Web AccessCelsius To Fahrenheit The Monitoring Statues screens behave like the Rule Status screen with the same capabilities of Hold Free and Delete entries Event24x7 User Manual Version 8 1 05 5 351 event 24x7 5 12 Database Status Database statis Q LOCAL DES Database Status Message Retrieves the status of the database in case a database is used Select requested DES and get the database at the selected DESs Event24x7 User Manual Version 8 1 05 5 352 5 13 Notification Status anon sta tls LOCAL DES Tickets Time Ticket U6 Sep 2010 13 53 40 9 Amir Process E Notncaton Stats amp Loc Port Status 16 Co
166. bs and any user s proprietary networking equipment like telephony PBXs Target Host Name IP Address Fing Interval Seconds Error Count consecutive fails for error Tirmeout default empty 4 seconds Target Target IP or host name Ping Interval Interval of performing ping connection checks to target Error Count Some hardware fails sometimes on the ping request This field sets the number of consecutive ping request failures required to reset the connection Event24x7 User Manual Version 8 1 05 3 60 event 24x7 3 1 3 2 2 11 TCPIP Connection TCPIP connection doesn t manage a specific target It opens a TCPIP interface and waits for incoming packets It allows external program sending events and messages to Event24x7 Event24x7 provides the Event24x7Message utility which can be used to send such messages from any computer Interface Settings TEF UDP Port rae Security Compression Secure Sockets Layer Terminal Size 24x 80 Socket type Security Tick compression box if you want to send compressed messages Tick Secure Sockets Layer for SSL communication Socket type TCP or UDP socket Port TCPIP communication port Terminal Size Screen size rows by columns Event24x7 User Manual Version 8 1 05 3 61 eCVeNnt 24x7 SNMP connection doesn t manage a specific target It opens a SNMP interface and waits for incoming Traps Settings
167. bs for entering a new rule Delete TR Delete Delete the selected rule Apply Des t Apply De Save last changes in the file at the DES Apply ial Apply Save last changes in the file Event24x7 User Manual Version 8 1 05 4 159 4 2 1 Using the Definition Command box Moving the cursor over the Commands pane at the window right side will open the Command box at the right side of the Definition window Rule Detiniton Group QA Rule MAIL Commands ax Examples _ General ee sal aril Activate IB CO Activate Rule E StartLogTest Co Command ff StartLogwatchi CO Command Special SAMPLES Display Exit Log Event24x Log User Ping Program spuewuog Y4 x Sending email Description STARTUP TEST UNIX Priority 100 Search Order Disable Session Process an CES Program As User Remove Rule Name io No Type ry Yez Send Server Statistics us Created 2004 04 21 11 48 send Value Server Command Changed 2074 05 11 11 34 By EVENT Notification Attention Information Base aa oO a a a aa a a a CES pes ff New amp Delete MlApply De ML Apply Programming The Command box operates only when the Action Tab is active The Command box has the same effect as the Pull down command menu of the Action Tab Event24x7 User Manual Version 8 1 05 4 160 event 24x7 4 2 2 Reserved Group names The Group name is used to arrange the Rule list with some logical groups There are
168. bug level Fields Debug Level Set debug level Accepted values l Minimal Write a message only by user specific log command 4 Medium Write lines for the command and for the result 8 Maximum Write a line for the original a line after AutoEdit and a line for the result Details Information Base can optionally create a local log file to audit the IB activities Every action is written to the log file according to the Debug Level The log file name is located at the lt RES Target Dir gt Log And the file name has the following structure lt IB name gt IB lt time gt lt thread id gt Where IB name Name of the Information Base Time Current time in format of HHMMSS Thread id Current thread of the Information Base Event24x7 User Manual Version 8 1 05 4 275 event 24x7 4 6 7 IB DISK Space IB DISK Drive Type Total space sd Purpose Check Disk space Fields Drive Drive letter c d etc Type Disk space check type Choose one from the list Total space Free space on drive Available space to caller Details The result of the check is returned as follows RC 0 Operation failed 1 Operation succeeded VALUE If operation succeeded this value shows the result of the check Example DISK Space Total space for c Message Total Size VALUE Verify Total Disk Space on Drive C and display result on the Event24x7 Server Focal Point Event24x7 User Manual Version 8 1 05 4 276
169. cal Point Fields Command command Server CES or DES Details This is the Event24x7 command line On the CES you can type any command at the Focal Point window that might trigger a What Command rule Actually only CES has a real Focal Point window The Server Command lets you act like each DES has a virtual Focal Point as a command line Same rule with What Command active at DES will be triggered upon this Event Event24x7 User Manual Version 8 1 05 6 537 event 24x7 6 10 66 Server Parameter Send Parameter ta DES Line Filename O O DES Serwer LUCASL DES Purpose Let Collector use values gathered by Fields Line Line that contains the parameter s values File name The values are created as a file that the collector can use Specify this same name when you define the collector that uses the Line DES Server DES name that will receive the Line Details This command is used as a bridge with the Parameters system Usually the collector performs a command or action to get some object values The Server Parameter command allows use of values created by the Monitor in the parameters Event24x7 User Manual Version 8 1 05 6 538 event 24x7 6 10 67 Session Session Operation Restart Session AGENT F Purpose Stop Start Session dynamically Fields Operation Operation options e Restart If the session is Active close it first Always Start the session at the end e Stop e Assure Active
170. case the Export will include all the monitoring definitions defined for the session 2 From monitoring definition In this case you can select the level of Export Monitor Collector or Parameter e Perform Import Parameters to add the new solution to the current Event24x7 installation The Export and the Import are done from the specific folder lt CES installation directory gt Imports The Export process creates a ZIP file containing all the information necessary for the Import process to succeed The Import process lets you change the name of the object involved For example if you take an Export from the Neptune session then during the Import process you can change the session s name Event24x7 User Manual Version 8 1 05 8 569 event 24x7 Starting the Import process is done by selecting a requested Exported entry and clicking the right mouse button or using double clicks with the left mouse button 8 2 1 1 Performing an Import Operation When starting the Import operation the following window appears Penorn gt Import pend Won Import file Collector AGENTLES5 FreeSpacedll 2014 05 27 101113 Cesson AGENTLESS Monitor Cancel The Import Operation lets you change the name if the Event24x7 object is involved Event24x7 User Manual Version 8 1 05 8 570 event 24x7 Enable copying a skeleton from one Event24x7 installation to another GIRO Events skeleton Level Object Name Export Date
171. ce User Expenence Operation _ Details User Exper Name Name Must be the same as the name of the User Experience Definition object Event24x7 User Manual Version 8 1 05 12 648 event 24x7 12 5 User Experience Commands The following list describes the commands that are available on the User Experience tool ClickControl selector lineNumber numberOfClicks clickButton ClickOnText findText occurence captMethod numberOfClicks clickButton divx divy find text TextToFind Timeout getTextFromRect int x int y int width int height String captMethod Search and click on a control on the screen Selector the selected control attributes If fromfile is written then the selector will be taken from the ControlFule txt file from the line indicated by the lineNumber parameter lineNumber the line number in the ControlFile txt file to take for a selector In use only if selector parameter equals fromfile numberOfClicks number of times to click C single or double click Button which mouse button to click on left middle or right Search and click on text on the screen findText text to find occurrence select which occurrence to click starts from 0 captMethod capture method Native or OCR numberOfClicks number of times to click C single or double click Button which mouse button to click on left middle or right divx n
172. cks whether the statement contains Event24x7 variables If it does it first changes each variable to the variable value and only then executes the action You can control this process via the Translate parameter 6 5 4 1 Collector activities 6 5 4 1 1 Disable When Specifies that the parameter will get its value from an external source and not from the collector In this case the Collector When Tab will become disabled and unused Since there is no scheduler the parameter will go into sleep mode until it will get a new value Usually the Parameter value is sent from a Rule or another Parameter 6 5 4 1 2 Empty Specifies that the collector will not execute any command Retrieving the parameter value is done in the parameter itself This is valid in cases where you can take advantage of the IB commands For example to verify if a service is running you can execute a WMI command on the Win32_Services via the collector or use an IB Service command The IB encapsulates all the important resources of the Windows platform The Performance component integrates and uses the power of the Rule engine Event24x7 User Manual Version 8 1 05 6 377 event 24x7 6 5 4 1 3 ADSI Command ADSI Command LEAF Authentication v default credentials Specify ADSI command for a LDAP server 6 5 4 1 4 Bandwidth Utilization Bandwidth Utilization Type Bandwidth Details for every p Specify Community for Bandwidth Utilizatio
173. cle Microsoft ODBC SQL ODBC SQL ODBC Trusted Connection SQL OLEDB Alias Connection s alias name Server Server s IP Timeout Time out in minutes for the query Credential Type Specify Credential Credential User Name and Password Credential Results Set SUCCESS Event24x7 User Manual Version 8 1 05 4 133 event 24x7 4 1 4 8 2 Command i E a DatabaseCommand1 Purpose Execute database query on the monitored session for any database and any database user Fields Command Database command Stored Procedure Indicate whether the Command is actually a Stored Procedure Connection Type Select connection type Use Connection String General Use Defined ODBC Oracle OLE DB Oracle OLE DB NET Oracle OLE DB Trusted Connection Oracle ODBC Driver Oracle Microsoft ODBC SQL ODBC SQL ODBC Trusted Connection SQL OLEDB Alias Connection s alias name Server Server s IP Credential Type Specify Credential Credential User Name and Password Credential Results Set SUCCESS Event24x7 User Manual Version 8 1 05 4 134 event 24x7 4 1 4 9 SNMP 4 1 4 9 1 Get Purpose Preform SNMP Get request Fields OID Object Identifier Community Community name Target Target IP Version SNMP Version 1 or 2 4 1 4 9 2 Get Next Purpose Preform SNMP Get Next request Fields OID Object Identifier Community Community name Target Target IP Version SNMP Version 1 or 2 Event24x7 User Manual Version 8 1 05 4 135 4 1 4 9 3 Get Bulk Purpose
174. com SSD DIS Shieh aoe TLS Event 4x7 triggerplus com 58 Enable Mail Server Name User Name Password Authentication Sender Server SMTP Port Secondary Mail Enable or Disable sending mails If this field 1s Disabled the Rule system will not send mail Your email server name Your user ID for the mail account Your user password Authentication type of the mail server The Mail sender for outgoing mails The default port used by SMTP is 25 Zero is treated as poet 25 Define secondary mail If sending mail to primary failed Event24x7 will send the same mail to the secondary defined Event24x7 User Manual Version 8 1 05 3 101 event 24x7 Enables using Event24x7 IVR capabilities d Voice Enable i 4 Connection Type Choose Connection TCPIP 4 TCPIP Parameters Host Name TCPIP Address 127 0 0 1 Port 2793 a E IrammMie ters gt Pipe Pa Enable Voice Enable or Disable voice capabilities Using the required Voice Card Please refer to the EventVoice chapter Connection Type Specify the location and connection parameters of the EventVoice server Event24x7 User Manual Version 8 1 05 3 102 event 24x7 3 8 6 SMS Tab Event24x7 sends SMS as part of its notification Center The SMS feature can be configured to work with any SMS provider User Name trigger Password anai From Prefix 052 From 1235456 7 Choose SMS type Command Command Line or Process Wait seconds between send 0
175. ction Set the gradient direction Available options top to bottom bottom to top left to right right to left Solid Color Choose the solid color The solid color will take effect only if Solid Color is chosen at Choose view option Color Choose the base color for gradient option Event24x7 User Manual Version 8 1 05 3 104 event 24x7 3 9 2 Runtime Tab 4 Alerts Open automatically 4 Startup Program User Defined Create Log file J Suppress display logo Open Automatically Select to open Alerts Screen Automatically when a new alert message arrives to Event24x7 Program Control what parts of the EventStudio are opened automatically when the EventStudio is started or the user pressed the Refresh button The user can arrange the required parts on the EventStudio desktop Create Log file Enables the Studio to create a log file similar to CES DES and RES Event24x7 User Manual Version 8 1 05 3 105 event 24x7 3 9 3 File Watch Tab File Watch is part of the Control Center component of Event24x7 d File Watch Open automatically Don t open File Watch Force Open No Close File watch FileViewer Owner EventStudio Default K Open Automatically Select this option to open the File Watch control when the user starts the EventStudio Force Open How to handle the File Watch control when the user closes the control FileViewer Owner Choose Desktop only when EventStudio starts in non display mode This feature al
176. ctor but is calculated in the State Tab using the IB statements the display value remain empty In those cases we can set the Parameter s display value For example getting the CPU utilization by IB RESOURCE CPU Since the value does not come from the Collector The Collector command is Empty we can change the display value for the Dashboard by using PRM Value Event24x7 User Manual Version 8 1 05 6 463 event 24x7 6 9 4 17 IB Date IB Date Type Get Date from current DES k Purpose Get for the parameter a specific date or set a date on the target system Fields Type Type of date to retrieve either from the DES or target system or set only for the target system Have the option to calculate date differences as well Details This IB command can be defined only here in the monitoring definition under the parameter s State Tab and not in the IBs definition or Rules Definition Therefore this command is only supported on DES Servers Event24x7 User Manual Version 8 1 05 6 464 event 24x7 6 9 5 Staging Area Delay the execution of the Action Tab till Event24x7 verify that the ancestors of this parameter are in OK state This is part of the root cause analysis mechanism Kep AgentLessCorrect Priority Low D 999 High Time walt Walt minutes before check ancestors Parameter Service Ancestors Key Staging Area Key Priority When Parameter arrives to the Staging Area has priority le
177. current working date of the computer on which CONTROL M Server is running CTM Server Address of CONTROL M Agent Details Activate ctmorder utility Event24x7 User Manual Version 8 1 05 6 487 event 24x7 Contral M Load set C Total Load Type Others CTMSewer o Purpose The ctmloadset utility records current resource usage on an agent computer in the Quantitative Resources table of CONTROL M Fields Resource Name of the Quantitative resource to Name update Load Value Number of units of the resource currently used Load Type Total or Other CTM Server Address of CONTROL M Agent Details Activate CONTROL M The ctmloadset utility and it is part of The CONTROL M load balancing algorithm Event24x7 User Manual Version 8 1 05 6 488 event 24x7 6 10 18 CTM Resource Control Resource Achar Resource Hame Mas Value CTM Server Purpose Performs operations on the Quantitative Resources table Fields Action Add Delete or Update Resource CONTROL M Resource name Name Max Value Maximum availability for the specified resource CTM Server Address of CONTROL M Agent Details Activate the ecaqrtab utility Event24x7 User Manual Version 8 1 05 6 489 event 24x7 6 10 19 CTM Shout Control h Shout Dest Severity Message CITM Server Purpose Sends a message to the specified user or destination using the specified severity level Fields Dest Destination Name Severity Severity
178. d global tran_ trot global orache_id global forengn_id state status heuristic det session vector reco vector SBU0 24 syedate reco_ time S600 2 4 sysdate nvl heunstic_tinefail_tinne global cornrnuth type from pending trans where session vector UOOOQU00L Previous SOL select local trar_id global tran trot global orache_id global forengn_id status heuristic dt state session vector reco vector SBU0 24 syedate reco_ time S600 24 sysdate nvl heunstic_ tinea tire global cornrnuth type from pending trans where session vector 0000000 Open Cursors None Event24x7 User Manual Version 8 1 05 15 681 event 24x7 15 2 5 Rollback Tab When selecting the Rollback Tab similar windows will be displayed SYS PUBLIC PUBLIC PUBLIC PUBLIC PUBLIC PUBLIC PUBLIC PUBLIC PUBLIC PUBLIC SYSTEM _SYS5MU1 Js fs ohMU 10g oT SSMU2 so fsahMUag oT SSMU4 _SYSSMUSE oT SSMUB _SYSSMUF oT SSMUG Js fsahMUag Ma Md Md Poh Po eo Po ea e oe ae ee o es es o D D D A A M aAa M aAa GA A SYSTEM UNDOTES1 UNDOTES1 UNDOTES1 UNDOTES1 UNDOTES1 UNDOTES1 UNDOTES1 UNDOTES1 UNDOTES1 UNDOTES1 114656 131072 131072 131072 131072 131072 131072 131072 131072 131072 131072 15 2 5 1 Rollback Operation Selecting an entry and pressing the right mouse button will open a popup window with the following possible action SHRINE operation Select it and the Shrink
179. d clicking the mouse right button will open a popup menu with investigating options Parameter Dashboard Service ALL Click to find string P Pf Case Sensitive Session AGENTLESS Monitor System Parameter Fr m Za FreeSpaceAl Bi AvailableMBytes i LJ charti ConsumingProcesses Definition Parameter Historical values Runtime Report Reset Chart Temp Files Run Now Notification Sa Uptime a Hd WebAccess Use the left mouse button double click to drill down to the default view option The default view option is defined at the Chart Parameter definition screen Event24x7 User Manual Version 8 1 05 event 24x7 Parameter Last Values Parameter Historical values Report Chart 5 4 3 1 Parameter Last Values Display table with the recent values of the parameter d Details Values from 05 26 2014 23 04 15 of FreeSpaceAll Monitor Free Space for all drivers Warning OK OK OK The Value and Name fields are taken according to the parameter Create tab definition at the Fields Pattern position The State is evaluated according to the Value of the Parameter and it s threshold Event24x7 User Manual Version 8 1 05 5 341 event 24x7 5 4 3 2 Parameter Historical values E Values of FreeSpaceAll Monitor Free Space for all drivers Date Elements Value State 05 26 2014 23 04 15 Warning 05 26 2014 23 03 15 Warning 05 26 2014 23 02 15 Warning 05 26 2
180. d result Indicates if to attach the result in a CSV CSV file to the mail Mail To Mail address Mail List Indicates a mailing list Mail Server Mail server Event24x7 User Manual Version 8 1 05 4 150 event 24x7 4 1 4 14 Event24x7 IB Agent 4 1 4 14 1 IB Service IBServic l Purpose Handle Service activity Fields Session Session name Name Service Service name Opening the combo box will bring the services currently running Choose one of them Type Chose type from list Start Stop Status Restart Retry Number of reties Results Set SUCCESS Event24x7 User Manual Version 8 1 05 4 151 event 24x7 4 1 4 14 2 IB Process IBProcess1 FR cos iar Purpose Handle Process Activity Fields Session Name Session name Name Process name Expanding the combo box will bring the processes currently running on the desired RES Choose one of them Type Type of activity Status Terminate Start Retry Number of retries Results Set SUCCESS Event24x7 User Manual Version 8 1 05 4 152 event 24x7 4 1 4 14 3 IB Performance Monitor Purpose Retrieve a Windows Performance Monitor counter value Fields Session Name Session name Object Object name Counter Counter name Instance Instance name Server Server name Cycles Number of cycles Wait mSec Default is 300 mSec Format Long Double Large Event24x7 User Manual Version 8 1 05 4 153 event 24x7 4 1 4 15 Flow 4 1 4 15 1 IF Statement P
181. d statement with the additional functionality of checking with the duration of time The state is assigned only if the relation condition is met with a specific threshold value for the whole time duration Event24x7 User Manual Version 8 1 05 6 461 event 24x7 6 9 4 15 PRM Threshold Summary Parameter Threshold Summar Compare Field C Last Checks Last Minutes Duration Check Defined Threshold Compare Field Field from the Create Tab like Value Name or user defined field Purpose Set the Parameter s state according to the sum of Value field and Parameter s threshold Fields Compare Field The Parameter s field name that contains the value to be compared with the threshold The fields are created at the Create Tab Relation The mathematical relation Duration Duration of time can be set in number of minutes or number of checks Details This statement is similar to the PRM Threshold Differential This statement sum the Value field in the duration of time The state is assigned only if the relation condition is met with a specific threshold value for summarize Value Event24x7 User Manual Version 8 1 05 6 462 event 24x7 6 9 4 16 PRM Value Parameter Set Value Purpose Set the displayed Parameter value at the Dashboard Fields Value Value to be display Details The parameter s display value is taken from the Collector s output When the parameter s value is not taken from the Colle
182. d tab in the Session configuration window No don t send to CES Yes send to CES Event24x7 User Manual Version 8 1 05 19 709 event 24x7 19 1 4 Rules 3 Rule triggered on DES By default a triggered rule will be sent to the Rule engine on the CES It can be overridden by the string Process on CES and set to No on the General tab in the Rule Definition s Screen 4 Norule triggered Set according to Process on CES option located on the Advanced tab in the Session configuration window No don t send to CES Yes send to CES Event24x7 User Manual Version 8 1 05 19 710 event 24x7 20 EventVoice EventVoice is the voice server component of Event24x7 It executes voice requests from voice scripts sent from Event24x7 EventVoice may be installed on any Windows 2000 XP computer that has a Dialogic voice card installed It does not have to reside on the same computer upon which Event24x7 CES or EventStudio are installed For detailed information regarding the installation of the Dialogic voice card and the board configuration steps please refer to the Event24x7 Installation Guide 20 1 Starting EventVoice Choose from the Start button Start gt All Programs gt Event24x7 gt EventVoice The EventVoice screen is displayed EventVoice File Edit View Configuration Help a E F Messages Time Message 18 20 40 16 20 40 Starting 1 20 40 Eventy oice Started 16 20 40 ControlThread
183. ding a pre defined solution from the Skeletons Event24x7 adds a complete solution Wizard When adding a pre defined solution with the Wizard Event24x7 adds a complete solution Copy amp Paste Two ways to open the Copy amp paste option e The Edit Bar at the right side e Selecting an object and right mouse click You can select Copy for single object or Copy with an Object and its associates at the levels below Paste from Skeleton It is possible to copy an object from the Skeleton definition window and paste it onto the appropriate level in the monitor definition window Manually Open an object and type the New button It will enable you to enter a new object name at the Name field When you type Apply the new object will be created Event24x7 User Manual Version 8 1 05 6 363 event 24x7 6 4 Monitor Definition Monitor is a container of Parameters that logically handle the same target For example Monitor of Oracle will hold all the Parameters that cover all the Oracle activities A Monitor relates to a single session Tab Performance at the session definition lets you set Monitors for the session Monitoring Getnion Session AGENTLESS Pro Active Pro Active Approach 3 SNMPPrinter SNMPSystem SNMBUtilization E Ea System AvailableMBytes H chart ConsumingProcesses l H cpu E H FreeSpaceAll F B HTTP MemoryUtilization H PerfMon j ES Ping Status Spue wwa s e9 pp
184. ds Act to change Object State from Current to Desire state Report status State Machine mechanism for Pro active approach The idea is not to wait for problems to become a show stopper but consistently check the environment and cure whatever has a potential to become a severe problem Event24x7 evaluates the state of every component it monitors Components may be every object which exists in the computer system parts like services memory paging CPU etc and business application aspects Each component s state evaluation is done according to a user defined threshold When a state of an object is not OK Event24x7 tries to change the object state back to normal and by that to prevent it from escalating Event24x7 User Manual Version 8 1 05 1 23 CVENT 24x7 The Performance feature is based upon three objects Monitor Collector and Parameter Monitor is the container of Event24x7 pro active activities Each Collector performs single query or operation against the target machine or application on the target machine Parameter defines the state of the monitored object First it takes the result of the Collector activity and creates a new value Second this value is analyzed according to a set of threshold values According to the threshold the state of the monitored object is defined The Monitor Collector and Parameters objects together provide the ability to monitor and handle the IT environment by a state machine It defines
185. e Event24x7 User Manual Version 8 1 05 8 599 event 24x7 8 6 Discovery Capabilities The ability to automatically identify network elements choose the recommended skeleton and let you build Event24x7 s sessions accordingly 8 6 1 Discovery Discovery DES Name IP Range From 192 168 OO To 192 168 O Net Mask 2595 255 255 CEDR i Perform Event24x7 User Manual Version 8 1 05 8 600 event 24x7 8 6 1 1 General tab DES Name LUCAL DES IF Range From 1952 168 OG 7 To 192 168 OF 254 Net Mask 255 255 2505 Q 0 CIDR DES Name Target DES to run the discovery IP Range From From IP to start the discovery To End IP to finish the discovery Net mask Valid Net mask CIDR IP From IP to start the discovery Bits CIDR bits number Event24x7 User Manual Version 8 1 05 8 601 event 24x7 8 6 1 1 Log tab The Log tab receives updates about the discovery process It display every element address that was found by the discovery process Event24x7 User Manual Version 8 1 05 8 602 event 24x7 8 6 2 Results Display the discovery processes that were ended DrscoveryHesolt event 4x7 Soliton Discovery Date DES Params if 05 27 2014 114317 LOCAL DES IF Range From 192 168 0 1 To 192 168 0 254 Net x Cancel Every entry represents discovery process that was executed Select one of discovery from the list or left mouse double click t
186. e file Event24x7 User Manual Version 8 1 05 6 365 event 24x7 6 4 1 General Tab SHMPSystem Monitor System parameters Description corn Enable tatuz RO O Disable Statistics Created 2011707716 19 14 Changed 2014 05 26 23 01 By EWENT Name Unique identifier of the monitor Description User s description of the monitor This specifies the monitor s target and any other information relating to the monitor Used for documentation Icon An Icon that represents the monitor in the Dashboard The Dashboard is the screen that displays the monitors and their parameters that are currently active Status Enable or Disable the monitor Created Creation date of the monitor Event24x7 User Manual Version 8 1 05 6 366 event 24x7 Changed Date of last change By Name of the user who made the last change Event24x7 User Manual Version 8 1 05 6 367 event 24x7 6 4 2 Fields Password Field Value Type Description MonitorField1 1 Address illic Upon selection of a pro active monitor the Monitor field s level is used by the Collector of the group to execute a query or command When several Collectors need the same values for their activities those fields are defined once at the Monitor level The Runtime process passes these values to the Collectors For example the Oracle monitor has several Collectors that access Oracle The fields required to access the Oracle OLED
187. e open problems pertaining to each session Open Problems All All opened problems listed unsorted in no specific order Where to save and or display the results of the report specified 3 available options Create at CES Don t send to open Studio The results are saved and updated on the CES folder but not on the EventStudio folder thus will not be displayed on the Event24x7 Report s window 6 532 event 24x7 Send Report to open Studio Open browser The results are saved and updated on both the CES and the EventStudio folders as well as being automatically opened for the user in a browser window display Send Report to open Studio Don t Open browser The results are saved and updated on both the CES and the EventStudio folders but without being displayed You must do it yourself via Event24x7 Details Use in case of critical or important triggers so you will keep a record of their occurrence 6 10 61 Restart Server Restart Server Type The command has no dialog Purpose Restart the server the current session is connected to Event24x7 User Manual Version 8 1 05 6 533 event 24x7 6 10 62 SELECT CASE Purpose Open a Select clause Fields Condition Specify expression If the expression is TRUE the statements in the CASE group are executed If the expression is FALSE the next CASE expression is examined Details Add the following four lines to the actions command SELECT
188. e relevant object names or values you want intercepted Information Base 1B IB Type Service Z Event24x7 User Manual Version 8 1 05 6 419 event 24x7 6 6 4 4 SNMP oh MP sing Method Simple Strings Case Sensitive Trap components r Insensitive Community OOOO Sender PF O AND Purpose message Fields String Method Case OID 1 4 Community Sender Event24x7 User Manual Version 8 1 05 r Intercepts a specific SNMP Trap that appears in the incoming String to search Method to use for finding the string e Simple string search e Using wildcard search with and in pattern means any characters and means a single character Whether the search is sensitive to upper and lower case For MIB Snmp checks the content of the first OIDs are in the mib Community of the SNMP trap Sender s IP address 6 420 event 24x7 6 6 4 5 String STRING Stine Method Simple Strings Colurmr o Attribute Arny Case Sensitive Insensitive Exclude Exclude list px Purpose Intercepts a specific string only 1f it exists in one of the blocks written to the files watched by the File Watch Monitor Fields String Method Column To Attribute Event24x7 User Manual Version 8 1 05 String to search Method to use for finding the string e Simple string search e Using wildcard search with and in the pattern
189. e the collector will not execute Event24x7 User Manual Version 8 1 05 6 374 event 24x7 6 5 4 Execution Define the single command or request that the Collector executes Command Command Operation Details E Command Select FreeSpace Size Devi Execute command at monitored computer Select FreeSpace Size DevicelD Parameters from Winse_LogicalD isk where Size gt 0 AND Drivel ype lt gt 5 Ue pi t s iCiYCS wn Exit Proc o O Once Translate C Alwaps Needed Fields Activity A pull down menu shows a list of available activities Force Cancel Automatic problem solver When a collector remains in the Running state this usually indicates a problem If the collector is in the Running state more than the Force Cancel value Event24x7 will restart the session Event24x7 User Manual Version 8 1 05 6 375 Translate Available actions Disable When Empty ADSI Command Bandwidth Utilization Command Command PsExec Copy Parameter CPU Usage Database DES Command Exchange Inbox File File Size HTTP Performance Monitor Ping Ports Scan PowerShell SNMP Get SNMP Get List SNMP Get Table Telnet Use External Windows Object Event24x7 User Manual Version 8 1 05 event 24x7 Specify how to translate Event24x7 System variables You have three options Once The search for system variables process occurs only once before the first execution of the collecto
190. e you define the exact names and location of the files you want to monitor and every time new data is written to any one of them this data is written on the focal point and transferred to the Interceptor for further processing Monitoring Denntion Session AGENTLESS File Watch Monitor EventViewer E ER EventViewer a H EventViewerApplication EventWiewerSystem SPU WUO JEg F Monitor Event Wiewer files Description En Change Enable O Disable Statistics Created 2011 07 16 17 53 Changed 2011 07 16 17 53 By FROM SKELETON Status The highlighted icon Indicates File Watch Monitor The FileWatch screen has two parts e FileWatch List The filewatch list which is located at the left pane of the screen and is displayed in a tree structure It contains the list of all the defined file watch monitors organized by groups A group is a logical unit sharing some common content for the file watch monitors within this unit e Definitions tabs The file watch monitor definition tabs are at the right side of the screen Event24x7 User Manual Version 8 1 05 6 424 CVCNT24x7 This section remains blank if you select a group from the Monitor List but shows detail for each file watch monitor File Watch monitor screen operation buttons DES DES Activate the selected file watch monitor at the appropriate DES Server of the monitor s session Event24x7 activates the file watch monitors automatically when a s
191. earch e Using wildcard search with and in pattern means any characters and means a single character Case Whether the search is sensitive to upper and lower case OID 1 4 For MIB Snmp checks the content of the first OIDs are in the mib Community Community of the SNMP trap Sender Sender s IP address Event24x7 User Manual Version 8 1 05 4 173 Details What SNMP enables a Rule to be triggered when a specific SNMP Trap is intercepted by the SNMP Event24x7 s session 4 2 4 8 String Parameter STRING Method Simple Strings Colur o Attribute Arny Case Sensitive Insensitive Exclude list Exclude Purpose Perform an action based upon a specific string that appears in the incoming message and or other strings that do not appear 1 e look for incoming messages that contain the string specified here but do not contain the strings specified in the exclude list if such strings exist Fields String String to search Method Method to use for finding the string e Simple string search e Using wildcard search with and in the pattern means any characters and means a single character Column Starting column The searched string must start from this position To Ending column Event24x7 User Manual Version 8 1 05 4 174 CVCNT24x7 Attribute Attribute of the message Available options Any Normal High Intensity Case Whether the search is sensitive to upper
192. ed file If the file doesn t exist Event24x7 will create it 4 1 4 11 2 Append Node Results a Purpose Fields Details Append node results to a user log file File Name Name of the log file Node Name Select a Node name from the list Event24x7 will append the results of a node to the specified file If the file doesn t exist Event24x7 will create it Event24x7 User Manual Version 8 1 05 4 143 event 24x7 4 1 4 11 3 Convert Query to HTML Gir 9 Purpose Convert node results to HTML Fields File Name Name of the output file Node Name Select a Node name from the list Details Event24x7 will convert the results of a node to HTML and write it to the specified file If the file doesn t exist Event24x7 will create it 4 1 4 12 Assign 4 1 4 12 1 Assign Entry Purpose Fields File Name Node Name Index Name Scope Select scope Local or Server Create Columns Delimiters Details Event24x7 User Manual Version 8 1 05 4 144 4 1 4 12 2 Set Purpose Fields Field Name Value Scope Evaluate 4 1 4 12 3 Set String Purpose Fields Field Name Value Scope Evaluate Type Event24x7 User Manual Version 8 1 05 event 24x7 Set value to an Event24x7 User Field Field name Do not prefix the name with Field value Field scope Local or Server Indicates if the value is a number Set value to an Event24x7 User String Field Field name Do not prefix the name with F
193. egotiation A Server sends a request to the other side to start the negotiating process Next keys are exchanged and encryption may be used Event24x7 User Manual Version 8 1 05 21 716 event 24x7 22 Problem Determination 22 1 Concept When facing a problem with Event24x7 there are three different phases to search for assistance e Event24x7 test external components programs e Event24x7 audit log file e Event24x7 unexplained behavior 22 1 1 Event24x7 test external components programs Some of the Event24x7 operations interact with external components o Voice operation depends on correct installation of the Dialogic voice card and its services o Sending mail operation depends on a working mail server o Establishing the Named Pipe connection depends on the current network When a problem occurs in these areas it is sometime hard to tell whether the problem is internal to Event24x7 or whether one of the external components is responsible for the problem In order to isolate the cause of the problem Event24x7 provides three simple test programs for each one of the actions Run the appropriate test program Failure of the test program indicates that the problem occurred due to an external component and is not related to Event24x7 Before testing the operation with Event24x7 please ensure that the test program works For more information see Event24x7 test external components programs section 22 1 2 Event24x7 audit log f
194. elating to the parameter Used for documentation Parameter not updates Tick this checkbox if you prefer that changes in the Dashboard parameter s state will not be reflected in real time on the dashboard 1 e the color won t change to red on the event of error The default value is unchecked Icon Icon that represent the parameter in the Dashboard The Dashboard is the screen that displays the monitors and their parameters Created Icon that represent the parameter in the Dashboard The Dashboard is the screen that displays the monitors and their parameters Changed Creation date of the parameter Changed Date of last change By Name of the user who made the last change Event24x7 User Manual Version 8 1 05 6 438 event 24x7 6 9 2 Properties Tab 2 Properties D Default State lt wan state if wasn t set State OK Suppress displaying at Dashboard Automatic Alerts amp Emails Automatic Aesettin Handle Alerts Handle Emails E Auta Test CY C Mail To EVENTLIST J Mailing List Automatic Notification ee Handle Motification Broadcasting Sending Use Group Default eG Le Decrease State Group Notify joe Group Default Force Action Report Force action on first check gt All States include OK L No thank you After Type Number Only Errors State When state changed Leave Blank for none 0 Always l v IF Multiole Value Prevent Action report every row eee Sal Force CSW file
195. elds Session Name The Parameter s Session name Parameter Name Name of the Parameter Value The Parameter s Value Name The Name field of the value State Set the Parameter s state It can be set it in advance to OK Warning Error or Severe It can also be set to Use Parameter State Tab and then the parameter itself will set the state according to the State Evaluation User Parameters Can pass user arguments as input to the parameter It can be used at the Parameter s side as 4 WORD 1 WORD2 etc Event24x7 User Manual Version 8 1 05 6 542 event 24x7 SET String String Manipulation Name S ounce Type Substr From qo Start with zero Length Evaluate alue Local SCOPE 7 Server d Universal Purpose String Manipulation It takes an existing Event24x7 variable System or User as input and lets you create a new variable by applying string manipulation Fields Name Event24x7 variable name that is used as input Source Name of the Parameter Type Action type Substr Left Right Before String After String Before Delimiter After Delimiter From Position where to start and the length of the Length target Evaluate Check this field when setting numerical values Value It provides the possibility to set string fields Scope Variable scope Event24x7 User Manual Version 8 1 05 6 543 event 24x7 Local Local variables live in the scope of the parameter they are executi
196. elds Source The originator of the new event viewer record Can be either Event24x7 or NiceTrack Event Id Event ID of the new record Type Select between the supported types Text Contents of the new record Event24x7 User Manual Version 8 1 05 4 207 event 24x7 4 3 30 IB Boot IB Shutdown Restart Session SGENTLESS Purpose Shutdown or restart the remote computer or device Fields Type Choose action type ShutDown Restart Win32 Shutdown Options Session Select session on which to perform above shutdown or restart operation Event24x7 User Manual Version 8 1 05 4 208 event 24x7 4 3 31 IB Command IB Command dent Session AGENT x Purpose Perform a command on local computer Fields Command The command to perform Identify Identify the string that will be sent to the Focal Point Session The session to perform the IB command on Event24x7 User Manual Version 8 1 05 4 209 event 24x7 4 3 32 IB Performance IB Performance Monitor Cycles Wait m5 ec Helper Dialog Purpose Retrieve values from the Windows Performance Monitor Fields Object Performance monitor variable For the Counter correct value open the performance Instance monitor and take the values from there Computer Computer name when required remote value For local computer leave it blank Cycles Number of times to perform rechecks in order to ensure that the result is as precise as possible Wait Time
197. engines and update the Diagram automatically to reflect the current status of the network components The Diagram tool has two components e Diagram Definition to create the Visio like graphical presentation of the network e Using the Diagram defined in the previous step to present the current network statuses 7 1 Diagram Definition RA Dagram trom NetworkMediim sdn BeA nco dE t a OOOHS MGs ilmel ALAA ie oe ajha ho afifta T tota ENC Edit Control B Simple Shapes E Control E Link And Lines E FlowChart E Flow FA Network Map Control ject Name AGENTLESS p WY p a In by we K fa E r D 3 re of Z D oS Q Use the Diagram definition to create the diagram shape that reflects the network structure The center of the screen is the canvas that holds the shapes that represent computers of the network You can copy amp Paste a shape on the canvas You can Paste shapes from any source If you have Microsoft Visio you can copy a shape from Visio and paste it on the canvas When you finish designing your diagram save it to be used at runtime Event24x7 User Manual Version 8 1 05 717 558 eCVeNtT 24x7 7 1 1 Tools to create diagrams The Diagram definition provides many sophisticated tools for creating the diagram that suites you the most 7 1 1 1 Edit Control The Edit Control Located at the left side of the screen It is used as a container of a variety of shapes Select a sha
198. ent24x7 allows you to send SMS simply and automatically In the Notification tab you need to enable the Notification Center and to select how to send the SMS There are three ways to send SMS Modem Mail and SMS Provider You can set the way to send SMS in each retry for every recipient By default the SMS would be sent with local Notification Center but if you don t have wireless modem at current DES you can redirect the sending to other DES Use Notification Center SMS Sending Order Target Executing SMS First attempt SMS Provider a kloder Third attempt SMS Provider Prowider Use Notification Center Enable the use of Notification Center for SMS sending SMS Sending Order Choose the way to send the SMS Wireless Modem SMS via Mail SMS Provider Target Executing SMS Select which DES to use for sending the SMS for the Modem Mail and Provider Event24x7 User Manual Version 8 1 05 3 45 event 24x7 3 1 2 8 Modems Tab A wireless modem can be connected to DES in order to send SMS The modem needs to be connected first to Windows and checked using the Control Panel gt Phone and Modem Options and then configured on the DES level in the Event24x7 It is important to set the parameters to match to the parameters in the Windows Control Panel Each DES can be configured to work with more than one modem BaudRate Data Bit Stop Bit Parity Flow Control Port The port that the modem is connected to Baud Ra
199. er Current E Hew Value x Cancel 1 3 6 1 2 1 2 2 1 1 1 LCa 4 Event24x7 User Manual Version 8 1 05 15 684 event 24x7 15 4 FileWatch Control FileWatch Control is part of the Event24x7 User Log Watch facility for Windows platforms either agent or agentless and UNIX When Event24x7 requests to watch a user log file any new record written to the file is read and sent to the Rule system and to the file watch and exception monitors if they exist Least but not least this record is displayed on the Focal Point and the Terminal of the log s session if it opens In addition to the above activities it is sometimes requested to let the user view each such log file as a separate unit like a file viewer FileWatch Control keeps the list of the log files and enables the user to open a file viewer to see the log files When starting the FileWatch Control if user log files exist there similar windows will be displayed ae HleWatch Control Files Names co stest file log For each session the windows display the list of the files under the FileWatch Control Event24x7 User Manual Version 8 1 05 15 685 eCVeNnt 24x7 15 4 1 File Icon status The background color of the icon displayed at the left side of each file represents the file view Status i No new lines added to the watched file since it was viewed Ti Noticed state Lines were added and were not viewed However the user selects this line from the lis
200. er Manual Version 8 1 05 4 238 event 24x7 4 3 57 Restart Server Restart Server Type The command has no dialog Purpose Restart the server the current session is connected to Event24x7 User Manual Version 8 1 05 4 239 event 24x7 CASE Purpose Open a Select clause Fields Condition Specify expression If the expression is TRUE the statements in the CASE group are executed If the expression is FALSE the next CASE expression is examined Details Add the following four lines to the actions command SELECT CASE expression CASE END SELECT END You can add action statements between the CASE and CASE END lines and they will be executed only when the CASE expression is TRUE You can add several CASE statements in the SELECT Only the first CASE clause that its expression is true will be executed among all the CASE statements Event24x7 User Manual Version 8 1 05 4 240 event 24x7 4 3 59 Send Server Send Value to DES Server Server LOCAL DES hai Purpose Send a User Variable From the CES server to the DES Server Fields Name Variable name Do not prefix the name with Value Variable value Server The Event24x7 s DES server for which to send the User s Variable to Details Mechanism to pass values from CES to any one of the DES The User Variable will have the Server scope at the DES side Event24x7 User Manual Version 8 1 05 4 241 event 24x7 4 3 60 Send Value Send V
201. er a What Command rule Actually only CES has a real Focal Point window The Server Command lets you act like each DES has a virtual Focal Point as a command line Same rule with What Command active at DES will be triggered upon this Event 4 1 4 3 9 Command DOS Purpose Issue a DOS command from local DES Fields Command The command to issue Event24x7 User Manual Version 8 1 05 4 127 event 24x7 4 1 4 4 Windows 4 1 4 4 1 WMI Query Purpose Issue a WMI command Fields Authentication Normal Level High Query WMI query to issue Name Space Default is root CIMV2 Remove field name Option to remove field name from result from result Server Server s IP or name Credential Type Specify Credential Credential User Name and Password Credential Event24x7 User Manual Version 8 1 05 4 128 event 24x7 4 1 4 5 UNIX amp Linux 4 1 4 5 1 Single SSH Command Purpose Issue a SSH command Fields Command SSH command Port Port number default 1s 22 Server Server s IP or name Credential Type Specify Credential Credential User Name and Password Credential Results Set SUCCESS 4 1 4 6 FIP 4 1 4 6 1 Connect Purpose Issue a FTP Connect command Fields Server Server s IP or name Port Port number default 1s 21 Credential Type Specify Credential Credential User Name and Password Credential Results Set SUCCESS Event24x7 User Manual Version 8 1 05 4 129 4 1 4 6 2 FIP Get Set FtpGeSett Purpose Fie
202. ers Elements Sort Ascending Alignment E ottom Get Top 10 values of a parameter from all VM guests Type Parameter Top Values Top 10 Session VM session to get the parameter values from Parameter Parameter s name Elements Number of top elements Sort Ascending or Descending Alignment Bottom or Top Event24x7 User Manual Version 8 1 05 6 405 event 24x7 6 5 4 1 25 6 List of Sensors Ai Miwaire Type List of Sensors ES Get a list of sensors from a single ESX server Type List of sensors ESX ESX to get the sensors from Event24x7 User Manual Version 8 1 05 6 406 event 24x7 6 5 4 1 25 7 Sensor Values Al Mare Type Sensor Values ESA Sensor Get value of a sensor from a single ESX server Type Sensor Values ESX ESX to get sensor s value from Sensor Sensor s name Event24x7 User Manual Version 8 1 05 6 407 event 24x7 6 5 4 1 26 Web Access Send data to a URL address Web Access Header Request URL Target URL address Proxy Proxy server address Header Package header Request Package body Event24x7 User Manual Version 8 1 05 6 408 event 24x7 6 5 4 1 27 Windows Object Windows Objects Type Service Status Mame Easy way to check Windows objects Service Process Resource etc Event24x7 User Manual Version 8 1 05 6 409 event 24x7 6 5 5 Verify Tab Skip Parameters cycle lf failed following checks Assurance Check eee Mandatory
203. ersion 8 1 05 11 638 event 24x7 Credential Credential from credential table Skeletons Currently attached skeletons Event24x7 User Manual Version 8 1 05 11 639 vent 24x7 11 3 2 Session Properties for Project CE Session Properties tor Project Properties Focal Point Message Color Text b Default p Focal Point Source Color co Te Session Default Me Background Process on CES Group Messages OiNo Grouping Rule or lB at Startup Name LO Type C Single Rule B Entire Group Target Rule to be executed at LES For lB Session type specify Namesthe session name Type Group for sending all Bs to startup Cancel Double click on a Session object will open the above dialog This dialog has some of the tabs from the session configuration dialog When a project is deploying the session will get its configuration from this dialog The available tabs are Advanced Informing User Skeleton Build Properties and Skeleton See Session Configuration section for more details In the Skeleton tab it is possible to select multiple skeleton for each session using the CTRL key Mouse left button 11 4 DES Session Connection Event24x7 User Manual Version 8 1 05 11 640 event 24x7 In order to connect a DES to Session select the DES and click the mouse left button on the center point and drag the connection to the Session s center point and release the mouse button Event24x7 User Man
204. erties Tab Properties tab is part of the Event24x7 Performance analyst For performance issues Event24x7 holds another set of connections to the managed platforms 3 1 3 8 1 Properties This tabbed page changes according to the type of session selected If it s a windows session then it will appear like this OANECOOPr ee Max Connections Server Name Server Name when one logs in from a remote platform SNMP Community Default community to SNMP commands When the Community field at the one of the SNMP commands remain empty Event will override it with the value given here Max Connections How many open connections Event24x7 is allowed to have concurrently This is a performance issue If this number is not enough it might cause some tests to delay until one of the connections becomes available Event24x7 User Manual Version 8 1 05 3 71 event 24x7 If it s a UNIX or Linux session then it will appear like this Max Connections Timeout seconds with the following additional options Timeout For UNIX sessions determine how much time to wait after the collector performs a command SSH Parameters For SSH connection Event24x7 uses plink You can specify plink parameters Event24x7 User Manual Version 8 1 05 3 72 event 24x7 3 1 3 9 Handling Session Activities When selecting a session and pressing the mouse right button the following pop up menu is opened Copy Rename Move Delete
205. es and Information Base 18 3 2 Coping the files Use the following rules e Remove the session name from the file name If Monitor file name is NAPTUNE CPU mon the skeleton file name should be CPU mon e Don t use the real session name in the file itself The session name is changed when applying the solution Instead use the pre processor 4SESSIONNAME When applying the solution Event24x7 will automatically replace 4SESSIONNAME with the real session name Event24x7 User Manual Version 8 1 05 18 706 event 24x7 18 4 Creating the solution control file A Single control file with the extension of skl combines everything into package instructions The control file location is below the first sub directory as described at chapter 10 3 1 after choosing the directory paragraph Choose carefully the file name The file name is the solution name that will appear at the Event24x7 Wizard Event24x7 User Manual Version 8 1 05 18 707 event 24x7 001 003 001 Start new SKL 015 Skeleton name 001 003 002 Description optional 015 __ Description 001 003 005 Session card optional 015 Sessionname S O 001 003 010 Collector and its parameters 015 Collector name x05 and list of the parameters separated by x05 015 RuleName o O 001 003 030 Information Base 015 Information base name o Cards 10 20 and 30 can be repeated as many times as needed Event24
206. es the ability to handle files remotely Event24x7 User Manual Version 8 1 05 4 295 event 24x7 Find File Contains Oo C Type Identify FileF inder Purpose Find files with specific characteristics in a directory Fields Directory Directory full path Prefix File s prefix name Report on files which this Prefix is part of their name Contains This field is optional Type File type to search for Smallest File Biggest File Created First Created Last Identify Identify string that will be sent to the Focal Point whenever a file 1s found Event24x7 User Manual Version 8 1 05 4 296 event 24x7 4 7 Templates Definition The Template is a versatile Event24x7 tool that performs several activities Automatic login to UNIX and LINUX sessions monitored by Event24x7 Table Lookup Mailing List Mail Status Data SMS Wireless Repository for Servers initial values The Template is a sub group of Rules and IB definitions Besides the General Tab it requires only the Action Tab The When tab is not required since the template is executed only during session startup Template Detiniton Group MailStatus Script SessionAgentless spuewwog Dy x ee A MailStatus E SessionAgentless PrinterStatus Mail Status Status Mail l Se ey Operation Details Status Printer Mail Status Status for AGENTLESS TableLookup TELNET SMAILSESSION AGENTLESS WirelessSMS Event24x7 synchronizes autom
207. ession becomes active When you change an file watch monitor s definition and want the changes to be effective immediately press this button and it will send the newly defined file watch monitor to the correct DES New Pal New Add a new file watch monitor Opens the definition tabs for entering a new file watch monitor Delete TA Delete Delete the selected file watch monitor Apply il Apply Save last changes in a file Event24x7 User Manual Version 8 1 05 6 425 vent 24x7 6 7 1 General Tab Description loon Status Statistics Created Changed Name Description Status Created Changed By E vent ener Monitor Event Viewer files Change Enable C Disable 2011 07716 17 53 2011 07 16 17 53 By FROM SKELETON Unique identifier of the file watch monitor User s description of the file watch monitor Used for documentation Enable or Disable the file watch monitor Creation date of the file watch monitor Date of last change Name of the user who made the last change Event24x7 User Manual Version 8 1 05 6 426 event 24x7 6 7 2 File Watch Tab Windows Users File File Name C 4Test File tet User File LNT est File bat l Pattern File Mame is pattern User DL denti fi E mit N File Watch Onee 0 Send to CES O Always Send to CES Flle watch D If Needed Open Viewer a C Don t Send to CES Translate Only one field is relevant in this tab
208. et Type Line order Line matches against Compare Value F Field Relation Failed State alye Severe Force Failed Values Send group to Parameter Purpose Test current value of a list of parameters with their previous values Fields Type Options e Count Entries e Line Order e According to Name field Compare Name of the field to compare as defined in Value field the Create tab Relation Choose one of lt lt gt gt Failed State Selected state in case of failure Force Failed Values that will return failed state Values automatically Send Group to Name of parameter to send the group of Parameter values to both for Failed and Success Details Compare current values of each line in the results against previous ones and sends the relevant group of values to another parameter for further processing Event24x7 User Manual Version 8 1 05 6 447 event 24x7 6 9 4 3 PRM Differential Parameter Differential Single Parameter Operation E j Group of Parameters Compare Field Compare Value ee 0 Last Checks Last Minutes At least Empty for always Compare Field Field from the Create Tab like Value Name or Purpose Test parameter behavior on the dimension of time Fields Operation Type of Activity Group activities check every member in the group with its value from the history results Relation Choose one of lt lt gt gt Or
209. et successfully This is done from the Server Configuration screen See Mail section Event24x7 User Manual Version 8 1 05 4 223 event 24x7 Mail Status Aun Script DES Traget 000 O Shout Hours When last sample rot in range Filter F Mail Wailing List Purpose Verify that the Parameters executed Produces mail report that highlight parameters that were not executed during tested period of time Fields Mail Status Script Entry from Script Definition that contains control definition for the result DES Target DES server name that printers related to it Shout Hours Highlight parameters that were not executed during the tested time Filter Filter the target parameters for the report Mail To Mail Target Mailing List Whether to use Event24x7 mailing list Server Event24x7 s server that will send the mail Event24x7 User Manual Version 8 1 05 4 224 event 24x7 4 3 44 Notification Center Notification Center Mode Broadcasting 2 Baup Meni sending Order Use Group Default Mott Order Use Group Default Purpose Use Notification Center to handle the alert Fields Mode Sending mode Available options Complete not available from rule Broadcasting Group Name Group name for sending the notification to its recipients Sending Order Sending order Available options Use Group Default All other options are not available from rule According to On Duty Calendar According to
210. et utility records current resource usage on an agent computer in the Quantitative Resources table of CONTROL M Fields Resource Name of the Quantitative resource to Name update Load Value Number of units of the resource currently used Load Type Total or Other CTM Server Address of CONTROL M Agent Details Activate CONTROL M The ctmloadset utility and it is part of The CONTROL M load balancing algorithm Event24x7 User Manual Version 8 1 05 4 197 event 24x7 4 3 18 CTM Resource Control h Resource Acton Resource Hame Max Value CTh Server Purpose Performs operations on the Quantitative Resources table Fields Action Add Delete or Update Resource CONTROL M Resource name Name Max Value Maximum availability for the specified resource CTM Server Address of CONTROL M Agent Details Activate the ecaqrtab utility Event24x7 User Manual Version 8 1 05 4 198 event 24x7 4 3 19 CTM Shout Control M Shout CTMSewer Purpose Sends a message to the specified user or destination using the specified severity level Fields Dest Destination Name Severity Severity level Message Message to send CTM Server Address of CONTROL M Agent Details Activate the ctmshout utility Event24x7 User Manual Version 8 1 05 4 199 event 24x7 4 3 20 Database Command Free Database Command Free from any parameter Operation General Existing ODBC hi Server or DSN Database User Password Comm
211. eters for Monitors 6 10 1 Activate IB ACTIMATE IB Name O 5 6 Single Information Base TOLE Group Type 0 General IB B for specific Session Parameter From Po Sesion S l Purpose Activate Information Base at a specific Event24x7 RES smart agent Fields Name Name of a single IB or Group of IBs to activate Group Choose IB or group of IBs Type Choose target single IB or entire Group of IBs Parameter Name of parameter to execute From Determine from which server to take the IB to send Current Server ask CES to send or if current failed send to CES Session Session to receive the Information Base Choose a session from the list of defined sessions of Event24x7 Details Activate Information Base on a specific session Has the same result as Activate IB from the IB definition Event24x7 User Manual Version 8 1 05 6 472 event 24x7 6 10 2 Activate Rule ACTIVATE RULE Rule Type Group From Gemer CES Server Purpose Activate a Rule Fields Name Name of a single Rule or a Group of Rules to activate Type Choose as a target either a single rule or an entire group of rules From Determine from which server to take the Rule Current Server ask CES to send or If Current Failed Send to CES Server Server to activate the rule Details Activate Rule This has the same result as Activate Rule from the IB definition screen Event24x7 User Manual Version 8 1 05 6 473
212. event 24x7 6 10 3 Alert ALERT C Do not change Severity Oo Warning Error Severe Severity Purpose Create a new Alert in the Event24x7 alert system Fields Operation Choose the operation Add Update two modes or options Changed only or Changed if Exist Add if not or Delete Message Alert message Severity Choose severity type The Alert background is displayed with the color according to the severity Warning Yellow Error Orange Severe Red Status Set the alert new status If the operation is Assigned then specify also the user name at the right field Details Alert is Event24x7 s component which signals to the operator that a problem exists The Alert remains active until the problem has been resolved The Alert is handled from the Alert Screen Event24x7 User Manual Version 8 1 05 6 474 event 24x7 6 10 4 Backup Backup Target Directory At the above target directory E vented Will add the following Backup directory Event dey Backup dater stimer Purpose Backup the user s configuration files Fields Target Place to write the backup files Directory Details It is important to take a backup occasionally of the user s configuration files Event24x7 User Manual Version 8 1 05 6 475 event 24x7 6 10 5 Beep BEEP Purpose Play a beep on the PC internal speaker Fields Frequency Frequency in hertz of the sound This parameter must be in the range o
213. event 24x7 Event24x Management System User Manual Version 8 1 05 SA TriggerPlus Software Ltd Event24x7 User Manual Version 8 1 05 1 1 event 24x7 Contents 1 INTRODUCTION 1 1 TRIGGERPLUS SOFTWARE 1 2 TRIGGERPLUS VISION 1 3 WHAT IS EVENT24Xx7 1 4 MODE OF OPERATIONS 1 5 BUSINESS PROCESS CONTROL 1 6 EVENT24X7 PHYSICAL ARCHITECTURE 1 7 EVENT24X7 MONITORING ARCHITECTURE 1 7 1 VERTICAL AXIS PHYSICAL STRUCTURE 1 7 2 HORIZONTAL AXIS VIRTUAL STRUCTURE 1 7 3 DEPTH AXIS STAGING AREA 2 STARTING EVENT24X7 2 1 LOGIN DIALOG 2 2 EVENT24x7 STUDIO 2 3 EVENT24xX7 NAVIGATION 3 CONFIGURATION 3 1 DESS AND SESSIONS CONFIGURATION 3 1 1 ACTIONS ON LEFT PANE 3 1 2 DES CONFIGURATION Event24x7 User Manual Version 8 1 05 CVeCNT 24x7 3 1 2 1 General Tab 3 1 2 2 Operation Tab 3 1 2 3 Connection Tab 3 1 2 3 1 Interface Tab 3 1 2 3 2 Settings Tab 3 1 2 4 Email Tab 3 1 2 5 Informing Tab 3 1 2 6 Database Tab 3 1 2 7 Notification Tab 3 1 2 8 Modems Tab 3 1 3 SESSIONS CONFIGURATION 3 1 3 1 General Tab 3 1 3 2 Connection Tab 3 1 3 2 1 Interface 3 1 3 2 2 Settings 3 1 3 2 2 1 Agent less Connection for Windows 3 1 3 2 2 2 Agent via TCPIP for Windows 3 1 3 2 2 3 Agent via Named Pipe for Windows 3 1 3 2 2 4 Telnet Connection for UNIX and Linux 3 1 3 2 2 5 SSH Connection for UNIX and Linux 3 1 3 2 2 6 MAPI Client Connection for Emails 3 1 3 2 2 7 POP3 Connection for Emails 3 1 3 2 2 8 IMAP4 Connect
214. ext message into any user file Send an email notification Send Parameters status via mail Send SMS using the Notification Center Enable or Disable the Notification Send an immediate SMS notification Convert a file to Event24x7 variables 4 179 event 24x7 Parse Input and Set Convert a single message to Event24x7 variables Optionally you can send them to Parameters Ping Check address for connection Play File Play file to get the operator s attention Popup Display a variety of notification popup windows Printer Status Run Schedule report via mail with printer counters Program Execute any external program at the Server machine Program As User Remove Rule Execute any external program under User credential Remove a rule or group from memory Report Save a report for Open Problems on Event24x7 Restart Server Restart current Event24x7 server Select Open Select statement Send Server Send User Variable from CES to DES Send Value Send User Variable from CES or DES to IB Agent Server Command Server Parameter of RES Simulate receiving command on the Focal Point Send Parameter to DES Session Stop Start session Set Create and assign values to a User Edit variable Set Parameter Set a value to a Parameter bypassing a Collector Set String String manipulation Sleep Sleep for a specified amount of seconds SMS Send SMS message via internet SMS Wireless Send SMS message via cellular modem SNM
215. f 37 through 32 767 0x25 through 0x7FFF Duration Duration in milliseconds of the sound Details The Beep function generates simple tones on the speaker Event24x7 User Manual Version 8 1 05 6 476 event 24x7 6 10 6 CASE CASE Purpose Add CASE clause to the SELECT clause Fields expression Details Two lines are added to the actions command CASE expression CASE END You can add action statements between the above lines and these statements will execute only if the CASE in the first expression is valid Event24x7 User Manual Version 8 1 05 6 477 event 24x7 6 10 7 Change Collector Interval Change Collector Interval Session name Collector name Time y No Restrichons 0 00 Interval d Minutes a Seconds al Purpose Change the Time and Interval parameters of a Collector dynamically This is done only in the Monitoring Definition And has no relation whatsoever to the Rule Definition Fields Session Name Session name of the collector Collector Collector name Name Time amp Similar Time and Interval fields as the Interval Collector When Tab Details If for example a cyclic test is performed every half an hour when the state becomes Severe the parameter starts correction activities It is sometimes vital to monitor the cure activities closely This command lets you change the next cycles Reduce the cycle interval until the state returns to OK Then increase it back to every h
216. f URL Handle IIS application pool Restart options for the specified session either ShutDown Restart and Win32Shutdown options Specific command to run on the Information Base Retrieve disk space on drive of running server Retrieve memory physical or virtual available on running server or session 6 469 IB Performance IB Performance VB Script IB Process IB Resources IB Service IF IF Object IF Parser Log Event24x7 Log User Mail Mail Status Run Notification Acknowledgement Notification Center Notification SMS Immediate Parse File and Set Parse Input and Set Ping Play File Popup Program Program As User Remove Rule Report Restart Server Select Send Server Send Value Server Command Server Parameter Event24x7 User Manual Version 8 1 05 event 24x7 Refers to the Performance monitor gives you the option to monitor specific objects that exist inside the perfMon on the related RES server Like the previous command refers to performance monitor objects but in this case with the use of a VB script Check all the existing processes running on a server Have the option to start or stop a specific process Check internal resources of an existing server Either CPU Memory Handles or Thread Count Check server s existing services Have the option to start stop restart or just check the status of a specific service Open IF THEN statement Open IF Object statement Open
217. f the screen defines the user s parameters user s name and description and security profile Event24x7 User Manual Version 8 1 05 3 81 event 24x7 3 3 1 General Tab User ID ADMINISTRATOR Full Name Event24 7 MASTR USER Remarks Status Enable Digable User ID Full Name Remarks Status Unique identifier of a user User s full name Detailed description or remarks about the user User status Enable User is authorized to use Event24x7 Disable User is not authorized to use Event24x7 Event24x7 User Manual Version 8 1 05 3 82 event 24x7 3 3 2 Security Tab Password Display Init or Reset only types fo Expiration 03 06 2020 Profile ADMINISTRATOR Type ADMINISTRATOR hi Password User s Password For the existing user this field remains empty It is used mainly for a new user When creating a new user it will display the user s initial password Upon the first time the user will login he will be forced to change his password Expiration User s expiration date Beyond this date the user won t gain access to the Event24x7 system Profile Relate the user to a defined Profile The Profile is the Security access level Type Two types of users are defined Normal User and Administrator The Administrator has more authorization compared to the normal user For example he can assign and reassign Alerts Event24x7 User Manual Version 8 1 05 3 83 Vent
218. fferent line types you can use 1 Free text Can be combined with HTML tags for Example lt b gt Event24x7 lt b gt 2 Contain PRINTERSESSION lt session name gt The line will be replace by the value of the requested printer 3 Contain PRINTERDES The line will be replace by the value of the all printers for the specified DES Event24x7 User Manual Version 8 1 05 4 299 event 24x7 When Event24x7 intercepts a problem one of the action items is to send a notification email In some occasion the target of the email should be group of people One solution is to define Group mailbox and to send the email to the group Every member of the group will get the email Another solution handles by Event24x7 with its internal mailing list ability When defining Action Mail you can choose the Mailing list option and provide a Template name for the mailing list The Mailing List mechanism uses a single command Mailing List When executed every entry with Action Mailing list command will get the email 4 7 6 SMS Wireless Sending SMS Wireless requires sending a command according to a specific protocol The Template defines the actions according to the protocol 4 71 1 Repository When a DES server becomes active CES synchronizes the Template content with the DES The comparison is done with a checksum Every Template that is not up to date will be sent to the DES This mechanism might save a lot of effort when deploying an Event24x7 i
219. file Text Event24x7 User Manual Version 8 1 05 12 650 event 24x7 12 6 Available keys The following keys are available for the key_press command as a parameter For example automator key_press ALT D automator key_press ENTER Parameter BACKSPACE BS BKSP TAB CLEAR ENTER SHIFT CTRL ALT PAUSE CAPSLOCK ESC SPACE PGUP PGDOWN END HOME LEFT UP RIGHT DOWN SELECT PRINT EXECUTE PRTSC INS DEL HELP 0 1 2 3 4 5 6 7 8 9 A B C D E F G H LJ K L M N O P QBS 1 U V W X Y Z Event24x7 User Manual Version 8 1 05 Key BACKSPACE TAB CLEAR ENTER SHIFT CONTROL ALT PAUSE CAPSLOCK ESCAPE SPACE PAGE UP PAGE DOWN END HOME LEFT UP RIGHT DOWN SELECT PRINT EXECUTE SNAPSHOT INSERT DELETE HELP 0 1 2 3 4 5 6 7 8 9 A B C D E F G H LJ K L M N O P Q R S T U V W X Y Z 12 651 event 24x7 LWIN LEFT WINDOWS BUTTON RWIN RIGHT WINDOWS BUTTON APPS APPS SLEEP SLEEP NUMPADO NUMPADO NUMPAD1 NUMPAD1 NUMPAD2 NUMPAD2 NUMPAD3 NUMPAD3 NUMPAD4 NUMPAD4 NUMPADS NUMPADS5 NUMPAD6 NUMPAD6 NUMPAD7 NUMPAD7 NUMPAD8 NUMPAD8 NUMPAD9 NUMPAD9 MULTIPLY MULTIPLY ADD ADD SEPARATOR SEPARATOR SUBTRACT SUBTRACT DECIMAL DECIMAL DIVIDE DIVIDE F1 Fl F2 F2 F3 F3 F4 F4 F5 F5 F6 F6 F7 F7 F8 F8 F9 F9 F10 F10 F11 F11 F12 F12 F13 F13 F14 F14 F15 FI5 F16 F16 F17 F17 F18 F18 F19 F19 F20 F20 F21 F21 F22 F22 F23 F23 F24 F24 NUMLOCK NUMLO
220. form actions when Service state changed Might be on any one of the Service components Session Monitor and Parameter Depth Axis Staging Area Use hierarchy definition inside a group of monitored objects to verify the root cause analysis to avoid false alarms and provide pinpointed information about the problem v Skeletons Changing the skeleton on every level will automatically change the session definition belongs to the skeleton v User Experience Record scenarios of user actions on websites or local programs and let Event24x7 to run them automatically according to schedule Check if a complete recorded process is ok measure Event24x7 User Manual Version 8 1 05 1 21 event 24x7 times of webpages and get the result back in the Event24x7 for analysis and alerts 4 Notification Center Handling problem assurance Pick up operator according to weekly duties and wait for acknowledgment that the problem was assigned to operator S Handling Down Time Define down time for maintenance and Event24x7 will not send alerts during this period S Live Diagrams Onboard and easy to use diagram creator for each organization to create its own diagrams and maps Each object in the diagram can become alive and get automatic color according to its state simply by connecting it to a monitored object Hierarchic structure of diagrams can be created with the option to jump from one diagram to the other by clickin
221. formance issues On the first pass Event24x7 compiles the statement into memory From the second pass it executes 1t in compiled manner This improves dramatically the performance Fields Xn Field number 1 2 Value User variable that matches the field number Expression Expression to check Details Add the following three lines to the actions command IF Parser THEN Parser THEN END Parser You can add action statements between the THEN Parser and THEN END Parser lines and they will be executed only when the IF Parser expression is TRUE Event24x7 User Manual Version 8 1 05 4 218 event 24x7 Example Suppose we need to check the following condition If 1SUM gt 197 If user variable named SUM is greater than 197 This should be written in the following syntax IF THEN Parser Variables sn Value 1 F15UM Expression s1 gt 197 At each cycle Event24x7 will replace x1 with the current contents of 1SUM Then it evaluates the expression Event24x7 User Manual Version 8 1 05 4 219 event 24x7 4 3 40 LOG Event24x7 LOG Internal of Eventds Tet O Purpose Write a message to the CES or DES Server log file Field Text Message to be added to the LOG file Details Event24x7 Server has a log file and every important event is written to the log file automatically The Source part of the display message on the Focal Point appears as Rule Followed by the Rule name Event24x7 User Manual
222. g 2 Error 3 Severe e Name from Create fields Relation Compare Value True Set the state if the quantities statements True or False False It is possible to have several PRM Quantity by setting the appropriate True False value to Do Not Set Event24x7 User Manual Version 8 1 05 6 456 event 24x7 6 9 4 10 PRM Set Value Parameter Set Yalue To Field Co Value Type Value Purpose Combine all the Set value into one single command Allows you to set a value to any one of the parameter s fields Fields Type Define the field type Value Set a new value Field Name If the field is not the Value or Name field you must specify the field name as defined in the Create Tab Details Event24x7 User Manual Version 8 1 05 6 457 event 24x7 6 9 4 11 PRM SNMP Auto Creating Parameter SNMP 4utomatic Creation MIB name Purpose Valid for Interceptor of SNMP traps When you need to intercept all traps from a MIB usually you need to define Interceptor and Parameter for each trap This might be consuming time effort This command achieves the same target automatically Every incoming trap from the specified MIB will be intercepted and sent to the Dashboard It will appear in Dashboard as lt MIB Name gt Trap lt Trap Number gt The state if the trap is taken from the MIB itself from Set State field Fields MIB MIB name that defined at MIB Definition Details The Action for the intercep
223. g an object Web Layer Event24x7 Web layer is the web interface of Event24x7 System Event24x7 Web provides operational view of the system s status It includes a dashboard charts reports and a rotational view of selected pages Event24x7 User Manual Version 8 1 05 1 22 event 24x7 1 4 Mode of Operations Two engines works in parallel mode v Manage by Exception User Defined Rules e e e L2 Automatically read from organization s data sources Evaluates events by organization Rules Triggered actions to resolve the problems Manage by Exception Approach Event24x7 has the ability to read from various sources such as UNIX Windows log files SNMP Traps TCP IP packets electronic devices etc and to act in case of problems according to powerful user definable rules When Event24x7 identifies that a problem occurs it notifies the operator and tries automatically to solve the problem Event24x7 has similar capabilities to cure the problem remotely as an operator working locally on the console When human intervention is required it would notify the designated persons by pager voice mail or other means Event24x7 would continue to monitor the problem until it is solved v Pro Active Approach State Machine mechanism ee o e o e L2 Consistently checks the environment Objects Set a State to every monitored Object according to user define threshol
224. h CES and DES 8 5 1 Installing remote DES J ae Installmg Kemote DES Host Name OIF Address Fort 7777 Authorization Administrator for Target Credential Specify User Hame Password l Add Definition ii Fertorm Event24x7 User Manual Version 8 1 05 8 587 event 24x7 8 5 1 1 General tab Host Name IP Address Port 4494 Authorization Administrator for Target Credential Specify User Mame Password Add Definition Target Host Name IP Address Port Authorization Specify User name Administrator for Target Password Add Definition Event24x7 User Manual Version 8 1 05 Remote server host name Remote server IP address The port used for communication User name to be used on remote server Password to be used on remote server If checked DES definition will be added automatically into Event24x7 8 588 event 24x7 8 5 1 2 Log tab The Log tab provides a list of the actions that the Event24x7 system is taking during the remote installation It also reports whether the installation was successful or a failure Event24x7 User Manual Version 8 1 05 8 589 event 24x 8 5 2 Installing remote RES ie Installing Renote KES Host Name CIP Address Port 27566 Authorization Administrator for Target Credential Specify User Hame Password l Add Definition DES Mame LOCAL DES 5 Authorization Administrator for
225. he focal point history use pull down menus to choose date and time and then press either left arrow for viewing of events from selected time and date and backwards or right arrow to see list of events from the selected timeframe and onwards Event24x7 User Manual Version 8 1 05 5 332 event 24x7 The Alerts screen is designed to assist system operators It signals that a problem exists and the Alert remains active until the problem is resolved OY Alerts i View al o Status Time Created Time Recent Session Source When a rule is triggered as a result of problem interception it can optionally open an Alert with the Action command of the rule 5 3 1 Alert s Attributes Background Alert background color represents the Alert s severity Color Red Severe Most Critical problem Orange Error problem Yellow Warning problem White Solved problem Alert has been closed Sound effects When an Alert is added to the Alerts screen it is possible to play a sound to get the operator s attention With the Alert Setup screen described in the Alerts section it is possible to assign a specific sound to each one of the three Alert severity types Assign Alert An Alert represents an open problem that the operators have to resolve An Event24x7 Administrator user can assign an alert to a specific user It signals that this user operator 1s now responsible exclusively for resolving the problem pointed out by the
226. he line in order to get the specific result of the selected discovery Event24x7 User Manual Version 8 1 05 8 603 vent 24x7 8 6 3 Create Sessions Display the network elements from a single discovery process and let you create Event24x7 s session for monitoring ee From 05 27 2074 114517 DES LACIES Params IP Range From 192168601 10 192 168 0 254 Ne X TCPIP Real Name Machine Creden Creden Skeletons Ports Remarks 7 192 168 0 1 N A Unknown N A N A N A 22 23 25 N A 192 168 0 196 XRMOOOOaa Xerox XRX x Cancel TCPIP TCPIP address of the element Real Name Element network real name Machine Type If the discovery was able to identify otherwise it set to Unknown Credential SNMP The name of the credential from the credential table 1f this element has SNMP connection Credential2 The name of the credential from the credential table for SSH or WMI connection Skeleton Event24x7 s Skeleton for creating the session Ports Display status of selected ports indicate port is listening The status display immediacy after the port number Remarks Additional information if available For example for printer it display the manufacture and model name Event24x7 User Manual Version 8 1 05 8 604 event 24x7 9 Notification Center Handle an open problem using Mail amp SMS sending until an operator takes ownership on the problem or the problem is solved Th
227. her evaluation When Event24x7 deals with huge events this might cause performance issues For example when Event24x7 must handle a user log file which has many records written to it simultaneously Group Messages assist us in handling this situation When checked Event24x7 divides the events into groups and sends them as such to the CES This reduced the overhead of sending one event at a time Send single Rule or entire group to the session when it Rule or IB at Startup becomes active A session of type RES Smart Agent has the capabilities to activate Information Base IB at Startup would activate the IB defined here automatically when the session status becomes Active For more information on the Information Base please refer to Information Base Definition ACTION Parameters for Information Base and Information Base Variables Sections Event24x7 User Manual Version 8 1 05 3 66 event 24x7 Perform Action Commands when Session state changes Usually the Informing tab sends email when a Session becomes Inactive T ol E E E X Mal ppe Regular Walng list HTML To Mail Data Specify Template Default Subject SSH5N H5E55IUNSTATUS Message EHSN PPRSESSIONSTATUS Attachment Type None Default Image URE Server Current Server Event24x7 User Manual Version 8 1 05 3 67 event 24x7 Define the pre requisite conditions for the ses
228. hese statements will execute only if the CASE in the first expression is valid Note The CASE command can also be added in the Monitoring Definition Parameter s State Tab with the same effect Event24x7 User Manual Version 8 1 05 4 188 event 24x7 4 3 9 Check Thresholds Purpose Fields Details Check Thresholds Content Relation Warning Error Content Change the state dynamically Content Field name from the Create Tab Relation Relation to compare Duration Duration in milliseconds of the sound Take the value of Content field and compare it to the specified threshold Set the Parameter state according to the Relation and the thresholds Event24x7 User Manual Version 8 1 05 4 189 event 24x7 The command has no dialog Purpose Clear the context of session s console Fields None Details Event24x7 Script handles automatic login script and sends wireless SMS Both scripts may use the Action Text on the Screen to search for specific text in the session s console It is sometimes required to clear the console in order to delete existing lines from previous requests This is relevant only in Linux and Unix sessions when attempting automatic login Note The Clear Text command can also be added in the Monitoring Definition Parameter s State Tab with the same effect Event24x7 User Manual Version 8 1 05 4 190 event 24x7 4 3 11 Command COMMAND Command D ession AGENT Pu
229. hip 6 2 1 In a Pro Active Monitor The Relationship of a Monitor Collectors and Parameters are a Tree structure 1 N Monitor2 Monito Parameter Paramet Monitor Container of Checks Collector Perform single check of any command Parameter Evaluate the result Map into proper field Set State Performs actions according to this state Event24x7 User Manual Version 8 1 05 6 359 event 24x7 6 2 2 In an Exception Monitor The Relationship of a Monitor Interceptors and Parameters are a Tree structure 1 N Monitor Container of Checks Interceptor Detect the appearance of specific strings in a file Parameter Evaluate the result Map into proper field Set State Performs actions according to this state 6 2 3 Ina File Watch Monitor The Relationship of a Monitor and FileWatches are a Tree structure 1 N Monitor Container of Checks FileWatch For each file intercepted its name and exact location 6 2 4 In an IB Session Monitor IB The Relationship of a Monitor and Information Bases are a Tree structure 1 N Monitor Container of Checks IB Perform multiple checks and actions Event24x7 User Manual Version 8 1 05 6 360 event 24x7 6 3 Pro Active Monitoring Definition This is the navigation screens that guide you to the Monitor Collector and Parameter definition screens Monitonng Denman Pro Active Parameter CPU J 3 SNMPPrinter SNMPSystem H SNMPUtilization System H H Avai
230. his command Please note that EventVoice can play two types of voice files VOX and WAV You can record those files using any third party program or using the Event24x7 Record voice command The EventVoice Dictionary must be placed in the same directory where the EventVoice program is located 20 4 EventVoice Startup Process Upon starting EventVoice it checks whether a voice card is installed on the computer If a card is not installed or the services required for using the card Configure from the Dialogic DCM program are not available it will display an error message in the Message window In this situation you must make the voice card operational before the EventVoice can work Close EventVoice and refer to the Event24x7 Installation Guide for voice card configuration When EventVoice succeeds in locating the Dialogic voice cards it automatically opens the cards and identifies the channels defined in each card For example Dialogic D4 PCI card can handle four different telephone lines concurrently EventVoice verifies that each channel is connected to a working telephone line Event24x7 User Manual Version 8 1 05 20 715 event 24x7 21 Security Several Event24x7 components transfer information The Central Event Server CES communicates with EventStudio Remote Event Servers RESs and with EventVoice The Security mechanism does not allowed non authorized persons to intercept the information transferred between Event24x7 c
231. ie Monitor Sushem Syshem 2014 05 27 115256 The Import skeleton has two steps e Perform Export to skeleton You can perform Export from two different locations 1 Skeleton Names Definition In this case the Export will include all the monitoring definitions defined for the skeleton 2 From Skeleton Definition In this case you can select the level of Export Monitor Collector or Parameter e Perform Import Skeleton to add the new skeleton to the current Event24x7 installation The Export and the Import are done from the specific folder lt CES installation directory gt ImportsSkeleton The Export process creates a ZIP file containing all the information necessary for the Import process to succeed Starting the Import process is done by selecting a requested Exported entry and clicking the right mouse button or using double clicks with the left mouse button Event24x7 User Manual Version 8 1 05 8 571 event 24x7 8 2 2 1 Performing an Import Operation When starting the Import Skeleton operation the following window appears Penmanne impor apertan Import file Skeleton HPlnsightS olution 2014 06 03 120612 Skeleton HP lreightS olution z x Cancel Event24x7 User Manual Version 8 1 05 8 572 NC 24x7 8 3 Restore From Backup Restore all the Event24x7 configuration files that have been previously backed up The List Backup button seen below allows you to select the backup date from which you want to resto
232. ield value Field scope Local or Server Indicates if the value is a number Available options Substr Left Right Before string After string Before delimiters After delimiters 4 145 event 24x7 From Character location to start from starts from 0 Length Substring length 4 1 4 12 4 Set Return Code etumCodel Purpose Set value to Return Code Fields Value Return Code value Evaluate Indicates if the value is a number 4 1 4 12 5 Set State SetStatet Purpose Set current Workflow State Fields State Select workflow state OK Warning Error Severe Event24x7 User Manual Version 8 1 05 4 146 CVCNT24x7 4 1 4 13 Event24x7 4 1 4 13 1 Set Parameter Purpose Send Value directly to Parameter It is used with a Collector that is defined as Disable When This disables the parameter from being performed every cyclic interval but only when the monitor containing this action is triggered It means that the Collector doesn t collect data The parameter retrieves data from an external source this monitor or another parameter This statement sends a direct value to the Parameter The Parameter isn t initiated by the Collector but only upon the arrival of this command Fields Session Parameter Value Name State User Parameters Event24x7 User Manual Version 8 1 05 The Parameter s Session name Name of the Parameter The Parameter s Value The Name field of the value Se
233. il configuration for the remote DESs Friman Secondary Enable if Email option Use CES email parameters Server Name L 0 O O Tt Authentication fone Server Port Email Option Enable Mail Server Name User Name Password Authentication Define DES mail configuration Possible values e Use CES parameters e Use mail parameters from here e Override CES parameters Enable or Disable sending mails If this field 1s Disabled the Rule system will not send mail Your email server name Your user ID for the mail account Your user password Authentication type with the mail server Event24x7 User Manual Version 8 1 05 3 40 event 24x7 Sender The Mail sender for outgoing mails Server SMTP Port The default port uses by SMTP is 25 Zero is treated as poet 25 3 1 2 5 Informing Tab Perform Action Commands when DES state changes Usually the Informing tab sends email when a DES becomes Inactive The mail is sent from the CES Regular C Mailing list HTML eventiatiggernlus corm Operation Details lt 4 Md ail i BEE Data Specify Template Default Subject 4 DESNAME PHDESSTATUS SHDESNAME SHDESSTATUS Attachment ma Type None Default hi URL o Event24x7 User Manual Version 8 1 05 3 41 event 24x7 Event24x7 User Manual Version 8 1 05 3 42 event 24x7 Event24x7 let you store the parameters values in the Database The database
234. il test program open DOS shell windows at the directory lt Event24x7 installation gt Tools Test Activate the program as follows Usage TestMail lt server gt lt username gt lt password gt lt sender mail address gt e If the TestMail succeeds an email would be sent to the lt sender mail address gt The email content would be This is a test of Event24x7 e The TestMail program creates a log file named testMail log This file contains the error messages that describe the sending mail result Event24x7 User Manual Version 8 1 05 22 24 event 24x7 22 3 Event24x7 Audit Log File The audit log file resides on lt Event24x7 CES installation gt Log Y YY Y MM DD log Where YY YY MM DD represents the current date Each day at 00 00 the log is replaced automatically by the Event24x7 server The log file contains important messages for problem determination The server Debug Level parameter controls the number of records that will be written The log file is simple text file Its content look like this 00 14 11 3B8 00 14 11 3B8 Starting 00 14 11 3B8 Main Control Thread Started 00 14 11 3B8 Installation Directory F Event CES Main 00 14 20 FFO RuleCheck Thread 0 Started 00 14 21 444 RuleCheck Thread 1 Started 00 14 22 8D4 RuleCheck Thread 2 Started 00 14 22 A08 RuleStructure Thread Started 00 14 22 AA8 Every Minute Activities Thread EMAT Started 00 14 22 AA8 gt gt Cycle at 0
235. ile Event24x7 manages an audit log file The log file contains results from various Event24x7 activities The log file may shed some light on the problem roots For more information see Event24x7 Audit Log File section Event24x7 User Manual Version 8 1 05 22 17 event 24x7 22 2 Event24x7 test external components programs 22 2 1 TestPipe Program 1 To start the pipe test program run the program lt Event24x7 installation gt Tools Test TestPipe exe Where lt Event24x7 installation gt is the Event24x7 installation location 2 TestPipe GUI is displayed e Event24x7 TestPipe Options View Help Sic Messages Main Please choose Server or Client Event24x7 User Manual Version 8 1 05 22 718 event 24x7 Select the Option gt Server from the main menu or from the Toolbar The following screen will be displayed e Event24x7 TestPipe Options View Help Messages Main Please choose Server or Client Server Pipe PIPE Eventedx7Pipel Created Successfully Waiting For Client Server2 Pipe PIPE Eventedx7Pipe2 Created Successfully Waiting For Client 4 Start another TestPipe program This time choose the Client option Select the Option gt Client from the main menu or from the Toolbar The following screen will be displayed Enter Server Mame Server Hame Leave Empty for current computer Cancel If you run the Client TestPipe program on the same computer as the Server
236. ime frame during which the rule 1s active Daily Process Specify whether the rule will be scheduled on a daily basis If it is not checked the rule will not be scheduled automatically on the next day Stop After Stop rule after a number of executions Interval For cyclic rule specify the interval upon which the rule will be scheduled Event24x7 User Manual Version 8 1 05 4 176 event 24x7 4 2 6 Terms Tab The Terms tab defines the logical terms that trigger a rule Mame IBM TECH ON SITE Exists stance _ L Does Not Exist Any scope Universal O Server Each term has a name and an optional date in which it is active A term has two states of existence Exists The rule will be triggered only if the named term exists Does Not Exist The rule will be triggered only if the named term does not exist Example execute rule only 1f these two terms are met MVS IS UP exists and IBM TECH WORKING does not exist A term has three scopes Server Check on the level of the running server DES or CES Universal The term is defined at all servers DES and CES Any Equivalent for Server and Universal scope Event24x7 User Manual Version 8 1 05 4 177 event 24x7 42 Action Tab The Action Tab defines the action s command that should be taken when a rule 1s executed DISPLAY i a Dieolaw Sending mail to voay DISPLAY Sending mail to Yoav pra g e M
237. imer If Target Directory was not set the Backup will be written to the default directory lt CES Installation Path gt Runtime Backup For each backup process Event24x7 sets the filename Event24x7 Backup YY Y Y MM DD HHMMSS The following directories are copied with the backup process Config Distributions Information Base Mibs Profiles Rules Scripts Sessions Users Voice and PerformanceActive Event24x7 User Manual Version 8 1 05 8 567 event 24x7 8 2 Import The Import action is providing a way to copy solutions and skeletons from on Event24x7 installation to another Place you exported file solution or skeleton in the relevant directory Imports for solutions or ImportsSkeleton for skeletons and click on the desired action Parameters Skeleton Import Solution Event24x7 User Manual Version 8 1 05 8 568 event 24x7 8 2 1 Import Parameters Enable copying a solution from one Event24x7 installation to another import evenwe4 x Parone ers Level bject Name Export Date ie Collector AGENTLESS FreeSpaceall 2014 05 27 101113 if Session AGENTLOG 201 4 05 17 220034 if Monitor ECI_BG_64 ECI _BG_64_ traps 201 4 04 30 114653 if Session ELI Bob4 BEDOF 201 4 04 29 095100 a ri i wo U EER gE ee ke Cancel la The Import solution has two steps e Perform Export to solution You can perform Export from two different locations 1 Session configuration In this
238. inate entries with OK state PRMRESULTCHECKS5 Like PRMRESULTALL but prints only the first five lines definition UNIQUENAME Create a unique name with the format of lt Session Name gt lt Parameter Name gt Helpful for creating Table Talk table name Event24x7 User Manual Version 8 1 05 16 694 event 24x7 16 4 2 System HTML mails Variables Valid for sending mail with HTML support HTMLRESULTALLERROR Similar to HTMLRESULTALL but display only objects that have not OK state eliminate entries with OK state HTMLTHRESHOLD Table with the parameter s Threshold 16 4 3 System Event Viewer Variables EVTLOGCATEGORY EVTLOGMESSAGE EVTLOGSOURCE 16 4 4 System Downtime Variables Event24x7 User Manual Version 8 1 05 16 695 eCVeNnt 24x7 17 Performance variables for multiple values PRMVALUE nnn Retrieve the nnn value The nnn is a number from to the number of occurrences nnn 1 retrieves the latest value and therefore it is the same as specifying PRMVALUE nnn retrieves the value before the latest PRMVALUE PRMNAME PRMVALUE lt name gt Retrieve the Value of the specified field name Summarize all the values in the list PRMVALUE CNT Count the number of the occurrences number of lines PRMINDEX The number of the current object current line PRMELEMENTS Total number of occurrences PRMSTATE State of the current object Event24x7 User Manual Version 8 1 05 17 696 event
239. ind Click to find string P PP ALL Session AGENTLESS a H E SNMPPrinter H E SNMPSystem H e SNMPUtilization 5 AvailableMBytes H charti k ConsumingProcesses EA FreeSpaceD Ea FreespaceE a FreeSpaceF EA HTTP a MemoryUtilization L PerfMon SMARTPredictedFailure Sa Uptime The Dashboard screen display the monitored parameters in their hierarchical structure Service Session Monitors and all the Parameters related to Monitors Event24x7 User Manual Version 8 1 05 5 337 event 24x7 The Parameter s background color is according to their state The Monitor state is the highest state its Parameters have Same way the Session state is the highest state of its Monitors The dashboard screen is updated automatically When a state changes Event24x7 updates the Parameter Dashboard screen immediately Event24x7 User Manual Version 8 1 05 5 338 event 24x7 The service has a hierarchical structure When you double click the mouse button over a service the selected service structure will be opened on the right side Parameter Dashboard Service Example 1 h Find Click to find string gt pi Case Sensitive W 2 fi Example1 Level 2 lt Session AGENTLESS Mos Example2 a MemoryUtilization a FortsTCP A LE charti Event24x7 User Manual Version 8 1 05 5 339 5 4 2 Investigate Parameter State Place the cursor over a parameter at the right screen part an
240. indowsAgent Changed 2012 09 09 01 56 EVENT H WM ware Examples of varous tests Description Parameters required for runtime Replace Parameters Right click on one of the skeletons will open the following local menu Event24x7 User Manual Version 8 1 05 10 627 Copy Paste Rename Export Create New Session Add Skeleton to Session Disable Sessions Enbale Sessions event 24x7 Adjust Sessions according to Skeleton Skeleton Definition Copy Paste Rename Export Create New Session Add Skeleton to Session Disable Sessions Enable Sessions Adjust Sessions according to Skeleton Skeleton Definition Event24x7 User Manual Version 8 1 05 Copy skeleton Paste skeleton Rename skeleton Export current skeleton Create a new session from selected skeleton with current skeleton s definitions Add the current Skeleton to an existing Session Disable all sessions created from selected skeleton Enable all sessions created from selected skeleton Change all session created from selected skeleton according to current skeleton s definition Open Skeleton Definition window 10 628 event 24x7 10 2 Skeleton Definition Manage the skeleton s monitoring definition Change copy add remove or create new monitors collectors and parameters inside the Proactive Exception File Watch or IB tabs All of the definitions made here will be applied in the sessions that will be created
241. inesse Tile Windows Save Position Black Refresh Arrange Icons Entry Screen Aqua State Colors Windows Screen Styles Site Control Bar Bars j User Interface A Ao E e E E L N E A E a E TME T relit AGO a a g E E RA RA A t e o e a a cans S OODOSCOURRAGDVUACKHMIOVCISCH i Map Control ax ject Name T Pointed AGENTLESS Session Page 0 O DD ataa a iT oole Ta a s MAHARANA R si ff Log Site Control TriggerPlus Software Read NUM Select the desire service and press the Set Service button Event24x7 will assign the selected service into the selected shape The result can be seen at the Map Control bar at the bottom Event24x7 User Manual Version 8 1 05 7 562 event 24x7 7 1 2 3 Use of the Map Control The map Control displays the defined sessions and services Select an entry and press the right mouse button A popup will be opened Reset Entry Set Pointed Service Page Set Pointed Service Page F Reset Entry Resets the pointed shape Removes the link from the pointed shape to the defined session or Service Provides the method to link a service to a specific page Mouse left button double click on a shape performs the following at run time e Session shape displays the 20 severe parameters e Service shape displays the page that is defined for the service This option lets you define the page that will be displayed when the double click event occur
242. installation location 2 TestVoice GUI is displayed Ej Sample Dialogic Voice Application File Function Options Window 3 Open Channel From the File submenu choose the Open option A dialog with available channels will be opened Select Channel dexx B1 C2 Genes dvexb 13 dvexb 1 C4 Make sure to select a channel that has a telephone line connected to it The dialog displays all channels even if they don t have a telephone line connected Event24x7 User Manual Version 8 1 05 22 21 event 24x7 From the Function submenu choose OffHook option E Sample Dialogic Voice Application File Function Options Window E docx 104 setting Offhook Done 5 Dial Select the Function gt Dial The Dial dialog is opened Enter Digits Cancel Perfect Call Analysis Fill in a valid number and click the OK button to dial it Choose the number of a phone that is near you 6 When the telephone rings pick it up and say hello You must say something so that the voice program identifies that a human picked up the phone Event24x7 User Manual Version 8 1 05 22 22 CVeCNT 24x7 Choose play VOX and select Sample vox from the same directory where the TestVoice program is installed on The program should play the file 8 Stop the call Select the Option gt OnHook option and then Option gt Stop to stop the session Event24x7 User Manual Version 8 1 05 22 723 event 24x7 e To start the ma
243. ion Option to force action even if workflow s state hasn t changed Optional Condition 4 1 4 15 6 Exit Workflow Purpose Stop executing current workflow Fields None 4 1 4 15 7 Exit While GEE oor Purpose Stop executing current while loop Fields None 4 1 4 15 8 Run Workflow Event24x7 User Manual Version 8 1 05 4 156 C Runtorfond Purpose Fields 4 1 4 15 9 Wait Purpose Fields event 24x7 Activate another workflow Name Name of workflow to activate Wait for Option to wait until activated ending workflow was ended Wait Timeout Number of minutes for wait timeout Minutes Delay workflow execution Type Select delay condition Minutes Condition Human Intervention Wait Delay interval in minutes Event24x7 User Manual Version 8 1 05 4 157 event 24x7 4 2 Rules Definition Event24x7 automatically monitors and manages the entire data center to ensure system availability The Rule System is an important component of this process Rules define how an incoming message from one of the sessions can indicate a problem or a specific event that we want to handle When this situation occurs the rule is triggered It means that the Action part of the rule is executed and automatically attempts to handle the event as described in the Action Parameters for Rules section of this manual Role DetimnitGon Group OA Rule MAIL H Examples SpUeWWuO oy x ma RA fa Display B MAIL t
244. ion Specify expression If the expression is TRUE the statements in the THEN group are executed If the expression is FALSE the statements are not executed unless there is an ELSE clause upon which the statements of the ELSE clause will be executed Details Add the following three lines to the actions command IF expression THEN THEN END You can add action statements between the THEN and THEN END lines and they will be executed only when the IF expression is TRUE Event24x7 User Manual Version 8 1 05 6 509 event 24x7 Operators Addition Subtraction and unary minus Multiplication Division m Power Modulo amp Logical AND Logical OR Logical NOT gt gt Greater or equal lt lt Smaller or equal Not equal Equal abs fact rand acos floor rand min max asin hex round atan if sin avg x y Z isNaN sinh bin log sqrt ceil log10 sum x y Z COS max X y Z tan cosh min x y Z tanh Event24x7 User Manual Version 8 1 05 6 510 event 24x7 6 10 42 IF Object IF Object Exist Type Process Nome Proceed TRUE If Object Exist FALSE If Object Exist Purpose Open an IF Object clause Fields Type Service or Process Name Object s name Proceed Select True if object exists or False if object exists Details Add the following three lines to the actions command IF Object expression THEN Object THEN END Object You can add action statements
245. ion days left 179 Workflow Gmo eS i Management Configuration Definitions Operation Help Terminal G E X e X A gt Q Q SK Le m g Q aa Rules IBs User Templates Voice MIB Services Monitoring Names Skeleton Project Workflow Diagram Define Group Definition Definition Experience Definition Definition Definition Definition Definition Definition Definition Recipient Definition Responding Mode Pro active Mode Skeletons Project Workflow Diagrams Notification Center B BB amp Bo XbA P Run M stop verity 4 Files amp Folders Group QA Name WMIFS Ray Properties Pane 4 WMI2 Node Caption WMI2 Enable Enable Get File Query Get File Time Different Set File Action Get Folder Query x Authentication Level Normal File Excel Action Query Select FreeSpace Size Devi 4 Services amp Processes Name Space Service Remove Field name from r v Process Start Process As User 4 Execution DES Command Get CPU Performance Monitor Port Scan Command Special Server Command Command DOS 4 Windows WMI Query 4 UNIX amp Linux Single SSH Command File Get Set File Handle Folder Handle Change Directory 4 Network Ping 4 Database Query ad M Log Site Control TriggerPlus Software Ready Event24x7 User Manual Version 8 1 05 4 110 event 24x7 4 1 1 Getting Started oh Workflow Workflow e Opening Workflow is done by selec
246. ion for Emails 3 1 3 2 2 9 RS 232C for Serial connection 3 1 3 2 2 10 Networking Connection 3 1 3 2 2 11 TCPIP Connection 3 1 3 2 2 12 SNMP Connection 3 1 3 2 3 Login 3 1 3 3 Advanced Tab 3 1 3 4 Informing 3 1 3 5 Dependent 3 1 3 6 User Tab 3 1 3 7 Skeleton Tab 3 1 3 8 Properties Tab 3 1 3 8 1 Properties 3 1 3 9 Handling Session Activities 3 1 3 9 1 Copy Session 3 1 3 9 2 Rename Session 3 1 3 9 3 Move Session 3 1 3 9 4 Delete Session 3 1 3 9 5 Export Session 3 1 3 10 Handling Session Skeleton Activities 3 2 SERVICE CONFIGURATION 3 2 1 GENERAL TAB 3 2 2 SESSIONS TAB 3 2 3 SERVICES TAB 3 3 USER CONFIGURATION 3 3 1 GENERAL TAB Event24x7 User Manual Version 8 1 05 event 24x7 3 3 2 SECURITY TAB 3 4 PROFILE CONFIGURATION 3 4 1 3 4 2 3 4 3 3 4 4 3 4 5 3 4 6 3 4 7 3 4 8 34 9 GENERAL TAB CONFIGURATION TAB DEFINITION TAB OPERATIONS TAB STATUSES TAB MANAGEMENT TAB CONTROL CENTER TAB FEATURES TAB SESSIONS TAB 3 5 TABLES 3 6 CREDENTIAL TABLE 3 7 DOWNTIME 3 8 SERVER CONFIGURATION 3 6 1 3 5 2 3 8 3 3 8 4 3 8 5 5 8 6 GENERAL TAB SECURITY TAB DATABASE TAB MAIL TAB VOICE TAB SMS TAB 3 9 STUDIO CONFIGURATION 3 21 3 9 2 3 9 3 3 9 4 39 3 DISPLAY TAB RUNTIME TAB FILE WATCH TAB SECURITY VALUES 3 10 DISABLE NOTIFICATION 4 DEFINITIONS 4 1 WORKFLOW DEFINITION 4 1 1 4 1 2 4 1 3 4 1 4 GETTING STARTED RESULTS SYSTEM VARIABLES ACTIVITIES 4 1 4 1 Files amp
247. ion tabs for entering a new IB Delete EE Delete Delete the selected IB Apply tal Apply Save last changes in the file 6 8 1 General Tab Event24x7 User Manual Version 8 1 05 6 432 Name Unique identifier of a IB Description User s description of the IB Order Enable or Disable the IB Created Creation date of the collector Changed Date of last change By Name of the user who made the last change Event24x7 User Manual Version 8 1 05 6 433 event 24x7 6 8 2 When Months Time All J Jar x Feb v Mar v Apr May ov Jun Fila Bestichone Jul Aug Sep Oct Noy Dec From weekD ays All Mon Tue 4 Wed J Thu Fi Sat v Sun 00 00 Days 03 vod vO 710 Wid wi12 All 417 wlia i139 24 425 W265 vii Daily Stop After Interval Daily Process Stop after Minutes Minutes Seconds Define when to schedule the IB Fields have the same meaning as in the When Rules tab The field Stop After has an important role of passing parameters to the IB when the connection is established Event24x7 User Manual Version 8 1 05 6 434 event 24x7 Define the single command or request that the IB executes IB MI Command select Name PercentProcessorT ime from Winse PerfFormattedD ata PerOS Processor Operation Details WMI Comm select Name PercentProcessorT ime fro Name Space Authentication Mormal Default Identify CPU Create output file for debug Fields Acti
248. ionTraps EwentMonitorlrap EwentMonitor I rapError 7 1 5 l j EMClarionT raps EventMonitorTrapFault EwentMonitorTrapInfo P EMC Storage m EventMonitorlrapWarn ee Descriptions Change SPUE wwo s Jg Pa lor Enable C Disable Statistics Created 2012 09 12 22 20 Changed A LTE 124 By EVENT Status The highlighted icon Indicates Exception Monitor The Interceptor screen has two parts e Interceptor List The interceptor list which is located at the left pane of the screen and is displayed in a tree structure It contains the list of all the defined Interceptors organized by groups A group is a logical unit sharing some common content for the interceptors within this unit e Definitions tabs The monitor definition tabs are at the right side of the screen This section remains blank if you select a group from the Monitor List but shows detail for an interceptor Event24x7 User Manual Version 8 1 05 6 411 event 24x7 DES DES Activate the selected interceptor at the appropriate DES Server of the monitor s session Event24x7 activates the interceptors automatically when a session becomes active When you change an interceptor s definition and want the changes to be effective immediately press this button and it will send the newly defined interceptor to the correct DES Interceptor screen operation buttons New Hf New Add a new Interceptor Opens the definition tabs for enteri
249. is state of the art system enables you to send notifications and receive acknowledgements from the operators that are on duty as well as to be notified on the current status of the problem handling The Notification Center System enables you to send SMS in a very simple way and to manage problems in order to assure that an operator takes ownership on a problem Notification Center operates at DES level It means that every DES can have its own system In addition it enables passing handling of problems from one DES to another Another advantage is by the ability to handle several modems concurrently Notification Center can also work in broadcasting mode It means sending a message without waiting for an acknowledgement The Notification Center find recipient by priorities or On Duty calendar SMS can be sent by all possible ways modem mail or provider Steps needed for using the Notification Center e If using wireless modem make sure it is connected and ready e Enable Notification Center at DES Definition e Define Recipients e Define Groups how to handle single open problem e At Parameter Definition set Notification Center handle the problem Event24x7 User Manual Version 8 1 05 9 605 event 24x7 9 1 Connecting Wireless Modem 9 1 1 Add the modem to Windows Install the driver is necessarily Control Panel gt Phone and Modem Options gt Modems gt Add The new modem will get a port from windows Phone and Modem
250. isk Space IB DISK Drive Type Total space Purpose Check Disk space Fields Drive Drive letter c d etc Type Disk space check type Choose one from the list Total space Free space on drive Available space to caller Details The result of the check is returned as follows RC 0 Operation failed 1 Operation succeeded VALUE If operation succeeded this value shows the result of the check Example DISK Space Total space for c Message Total Size VALUE Verify Total Disk Space on Drive C and display result on the Event24x7 Server Focal Point Event24x7 User Manual Version 8 1 05 6 502 event 24x7 6 10 35 IB Memory IB Memory Type Memory utilization z kemon size in Mega bytes Purpose Check various Memory statuses Fields Type Memory check type Choose one from the list 0 memory utilization 0 100 1 Total size in bytes of physical memory 2 Size in bytes of physical memory available 3 Total possible size in bytes of the paging file 4 Size in bytes of space available in the paging file 5 Total size in bytes of the user mode portion of the virtual address space of the calling process 6 Size in bytes of unreserved and uncommitted memory in the user mode portion of the virtual address space of the calling process Details The result of the check is returned as follows RC O Operation failed 1 Operation succeed VALUE If operation succeeded the result
251. ithout installing local agent Event24x7 take full advantage of the WMI protocol Settings Authentication ioral Default Level Terminal Size 4 80 Server Server name of the managed platform If the platform resides on the local PC it must remain empty Name Space WMI name space The default is root cimv2 Terminal Size Screen size rows by columns Event24x7 User Manual Version 8 1 05 3 51 3 1 3 2 2 2 Agent via TCPIP for Windows Manage Windows Operating System with local agent Event24x7 Remote Event Server RES must be installed The communication is based upon TCPIP Target Host Name IF Address Socket type TCP j I ODF Fort ATOE Security Lompression Secure Sockets Layer Terminal Size 24x 80 Host Name Target computer name IP Address Target computer TCPIP address Socket type TCP or UDP socket Security Tick compression box if you want to send compressed messages Tick Secure Sockets Layer for SSL communication Port TCPIP communication port Terminal Size Screen size rows by columns Event24x7 User Manual Version 8 1 05 3 52 3 1 3 2 2 3 Agent via Named Pipe for Windows Manage Windows Operating System with local agent Event24x7 Remote Event Server RES must be installed The communication is based upon Named Pipe Settings Server Server name If the server is current pc leave it blank Suffix Named pipe file suffix
252. itored the session the session itself and the application running on the computer 2 Select the solution Event24c brings several pre defined solutions that can be implemented immediately and automatically without any writing The offered solutions are for the system of the monitored computer and application running like Databases Eechange Server etc This step is optional for most of the solutions and obligate for part of them The run time parameters uses as a threshold for tiggering action hid are solutions that demands setting Like database solution in which the User Name and Password must De set SUONIN OS pauyag ad Installing the pre Defined Solutions is a simple three steps process as explained in the screen Event24x7 User Manual Version 8 1 05 8 574 event 24x7 8 4 1 Wizard step 1 Select Session You have two session options e Select an existing session When referring to an existing session the wizard will direct you to the second Step e Selecting a new session The Wizard will direct you to specify only the parameters necessary for defining the new session If you add also a new DES it will add the new DES for you 8 4 1 1 Existing Session Wizard Event 4x7 Pre Detined solutions a Pezi Choose session option Select the appropriate session option bellow Existing Session Name AGENT SUOIIN OS pauyag ald Press the Next button to move to the second step Wizard step 2
253. l name Details Example Number of digits to get 1 Maximum time in seconds 60 If no line go to ERROR If error go to ERROR Event24x7 User Manual Version 8 1 05 4 306 event 24x7 48 4 GOTO label GOTO Label Label Name DIAL Purpose In a script jump to a label Fields Label Name Name of the label Details Jump to labeled section in script Example GOTO label retry 4 8 5 Hook Off HOOE OFF Pickup the phone Purpose Pick up the phone Fields If no line goto Label name Details Pick up the phone to get a line signal This is the action to be taken before dialing a number Example Hook Off Event24x7 User Manual Version 8 1 05 4 307 event 24x7 4 8 6 Hook On Purpose Put the phone in its cradle Details End of voice conversation Example Hook On 4 8 7 If Digits IF DIGITS Digits IF true goto OME IF false gota ERROR Purpose Check the input that was provided by the caller The Voice script continues conditionally according to the input Fields Digits Digit numbers entered by the caller If true go to Label name If false go to Label name Details Example Digits 1 If true goto ONE If false goto ERROR Event24x7 User Manual Version 8 1 05 4 308 event 24x7 4 8 8 Label LABEL Label Name K Purpose Script label Fields Label Name Label name Details Script label to define a script section May be used in conjunction with GOTO label action Event24x7 User Manual Version 8 1 05 4
254. lablemBytes J chart Ej ConsumingProcesses Check whether CPU is over 80 H cpu during two consecutive minutes pii Description FreeSpaceall H HTTP H MemoryUtilization FerfMon H Ping Dashboard Parameter not updates Dashboard EJ PortsTCP H Process Icon Change Service SPUBLULUOT Jg ups LEJ 4 Ll H H H E Statistics SMART PredictedFailu i Created 2074 04 28 09 38 EE The highlighted icon Indicates Pro Active When entering this screen the objects are grayed out You have to choose a session from the active session defined in Event24x7 and then you will be entitled to select an object type from Monitor Collector or Parameter The left side shows the objects in a hierarchical structure Event24x7 User Manual Version 8 1 05 6 361 event 24x7 One of the big advantages of Event24x7 is that it is an open architecture and you can add your own resource monitoring to suite your organization As always using event24x7 is very easy and it is similar to the way you use the Rule definition in Event24x7 Event24x7 User Manual Version 8 1 05 6 362 event 24x7 6 3 1 Adding a new object Monitoring activities are comprised of the three objects Monitor Collector and Parameter that relate to a specific session The relation is hierarchically structured as a One to Many tree You have the following ways to add objects Skeletons When ad
255. lanned Entity Service 3 Party Severity Environment Type In each table select and check the values to display Event24x7 User Manual Version 8 1 05 5 329 event 24x7 5 2 Focal Point Focal Point provides a single place to monitor control and handle exceptions automatically for computers and resources that are critical to the organization Focal Point shows messages and commands and states their sources The user may enter commands from the Focal Point Command line Messages coming from a monitored session are displayed on the Terminal assigned to the session and also sent to the Focal Point Focal Point is actually a master console of all consoles OS 26 20 H eet tas Probe_6 BEDOK_HM Internal Session status is Init Probe _2 TS Slave Internal Session status is Init EHC 1 Internal Session status is Init PS BEDOK Internal Session status is Init Perf Ping Probe_BP_ PING to 192 168 166 248 is ERROR Perf Ping ClusterEx Perf Ping LE1 ECI_AS9216_B ECI_AS9216 A Probe 11S H RAD_BEDOK_F RAD_BEDOK_A Probe_5 ALJU Slave ECI AS9216 BP AD_BEDOK_D DB2 ECI_AS9216_C Probe_3_KB AD KB A ECI AS9216 Bedok DB1 Probe 2 TS Slave EHC 1 RAD BEDOK C Probe 6 BEDOK M PING to 192 168 166 64 is ERROR PING to 192 168 166 116 i status i status i status i status i status i status i status i status i status i status i status i status i status i status i status i Internal Internal Internal Intern
256. ld is optional The default value is Inbox This option is in addition to Event24x7 capabilities to monitor the Exchange operations The Exchange Inbox provides capabilities to monitor a single user s mailbox activities The result of this execution is a single line with three values o Number of items in the mailbox o Date of the first mail in the mailbox o Date of the last mail in the mailbox This action is done remotely No need to install anything at the Exchange Server itself Event24x7 User Manual Version 8 1 05 6 384 event 24x7 Event24x7 User Manual Version 8 1 05 6 385 event 24x7 6 5 4 1 11 File File Type File Attributes E sist Handle file status Enable for checking file status or copy external file to be input for the Monitoring process Event24x7 User Manual Version 8 1 05 6 386 6 5 4 1 12 File Excel File Excel Type File Copy event 24x7 T Header Skip Column header Sheet Delimiter Handle Excel file status Enable for checking Excel file status copy external Excel file to be input for the Monitoring process or delete an Excel file Type Name Header Sheet Delimiter Event24x7 User Manual Version 8 1 05 Available options e File Attributes Exist e File Copy e File Delete Full path and file name Check to skip column header Sheet number Delimiter between fields 6 387 24x7 6 5 4 1 13 File Size File Size File Name
257. lds Results 4 1 4 6 3 File Handle a FtpFileHandlet Purpose Fields Results event 24x7 Perform FIP file action Type FTP Path Computer Path File Name Transfer Mode Set SUCCESS FTP file handle Type File Name Set SUCCESS Event24x7 User Manual Version 8 1 05 Get file Put file FTP path Computer path File name ascii binary Exist Rename Delete Minutes from last update File name 4 130 event 24x7 4 1 4 6 4 Folder Handle FtpFolderHandle1 Purpose FTP folder handle Fields Type Folder Details Number of Files Delete Folder Name Folder name Results Set SUCCESS 4 1 4 6 5 Change Directory FtpChDiri J Purpose Change Directory Fields Type Move one up Change current directory Results Set SUCCESS Event24x7 User Manual Version 8 1 05 4 131 event 24x7 4 1 4 7 Network 4 1 4 7 1 Ping Purpose Preform Ping command Fields Server Target destination Results Set SUCCESS Event24x7 User Manual Version 8 1 05 4 132 event 24x7 4 1 4 8 Database 4 1 4 8 1 Query DatabaseQuery1 Purpose Execute database query on the monitored session for any database and any database user Fields Query Database query Stored Procedure Indicate whether the Command is actually a Stored Procedure Connection Type Select connection type Use Connection String General Use Defined ODBC Oracle OLE DB Oracle OLE DB NET Oracle OLE DB Trusted Connection Oracle ODBC Driver Ora
258. les that have the same value as the RC but for each group of activities RC is changed after each IB action If you want to use the result of the IB Service later the RC SERVICE variable saves the RC from the latest IB Service request Variables in this group RC BOOT RC RESOURCE RC SERVICE RC PROCESS Examples Disk Space drive c IF VALUE lt 3000 THEN Any Action Activities ENDIF Meaning of the RC SERVICE Stopped Start Pending Stop Pending Running Continue Pending Pause Pending Paused Unknown Not Exist OANNNBWN Event24x7 User Manual Version 8 1 05 16 692 event 24x7 16 4 Performance Variables 16 4 1 System Variables AUTOTEXT The Auto text field CESLOG File name of the CES log file COLLECTOR Different values according to the Collector e Ping Target address e Http Server Address e User File File Name e Windows Object Object Name DESC DESLOG DESNAME DN FILENAME FILENAME2 MEMBERCOL MEMBERMON MEMBERPRM MONITORFIELD1 General field 1 from the Monitor Fields tab MONITORFIELD2 General field 1 from the Monitor Fields tab MONITORFIELD3 General field 1 from the Monitor Fields tab MONITORFIELD4 General field 1 from the Monitor Fields tab MONITORFIELDS General field 1 from the Monitor Fields tab MONITORPASS WORD Password field from the Monitor Fields tab PRMADDRESS Server Name from Session Configuration Performance Tab PRMALLNAMES List of all the Names PRMCOUNTINSTATE
259. level Message Message to send CTM Server Address of CONTROL M Agent Details Activate the ctmshout utility Event24x7 User Manual Version 8 1 05 6 490 event 24x7 6 10 20 Database Command Database Command From Database Monitor Purpose Execute database command on the monitored session I think this refers mostly to sql queries Fields None Details The Database command is responsible for database manipulation activities Deleting database entries adding new ones and or using sql to retrieve selected entries Event24x7 User Manual Version 8 1 05 6 491 event 24x7 6 10 21 Database Command Free Database Command Free from any parameter Operation General Existing ODBC Server or DSN 00 Database User Password Command Stored Procedure Purpose Execute database command on the monitored session for any database and any database user Fields Operation Select Database SQL Server Oracle OLE DB Oracle ODBC Server or DSN Server s IP or name Database Database name User Database user name Password Database password Command Command to perform on database Stored Procedure Indicate whether the Command 1s actually Stored Procedure Details The Database command is responsible for database manipulation activities Deleting database entries adding new ones and or using sql to retrieve selected entries Event24x7 User Manual Version 8 1 05 6 492 event 24x7 6 10 22 Database Inse
260. ll bi View All View All Alerts regardless of their status Existing Problems View Alerts that represent problems It contains Alerts with status of Open or Assign Not Assign View Alerts that represent problems Show Alerts with status Open only It represents problems that were not assigned yet to a specific operator Sound Control A sound from wav or mp3 can be assign to any one of the three Alert severity types This control monitors the progress of the sound played Event24x7 User Manual Version 8 1 05 5 335 event 24x7 5 3 5 Setup When choosing the Setup option from the Toolbar the following window will be displayed Alert setup E Sound efects C Program Files x86 Event24x7 EventStudio Sounds Siren L wav C Program Files x86 Event 4x7 EventStudio Sounds Grplaff wav C Program Files x86 Event 4x7 EventStudio Sounds Bourb im 1 waw El arc Behavior Choose the Behavior of the Alert windows Ok x Cancel For each one of the three Alert severity types choose a sound that will be played when an Alert of this type is added Auto scrolling option causes the Alert windows to ensure that a new added alert will be visible on the Alert screen Event24x7 User Manual Version 8 1 05 5 336 event 24x7 The Dashboard screen displays monitored objects according to their threshold The Dashboard is the Pro Active Approach engine s results Parameter Dashboard Service ALL ith F
261. lows to hide the GUI but lets the File Watch control popup automatically whenever a new line arrives in one of the watched user log files Event24x7 User Manual Version 8 1 05 3 106 event 24x7 3 9 4 Security Compression Select whether to compress the packets sent from the EventStudio to the CES Encryption Select whether to encrypt the packets transferred between EventStudio and the CES For more information about security aspects please refer to the Security chapter 3 9 5 Values Email Target Default email To address When defining the Action mail command the default mail will be inserted automatically into the To field User Log File Default User Log file name When defining Action Log user command the default file name will be inserted automatically into the file field ToolTip When set it displays a tool tip for the Action Commands Event24x7 User Manual Version 8 1 05 3 107 event 24x7 3 10 Disable Notification The Disable Notification feature allows you to stop all notification from Event24x7 This means that no mails and no SMS will be sent from Event24x7 for as long as the checkbox is checked Once un checking it all the notifications will return to normal state and will be sent if ordered V Disable Notification Notification Event24x7 User Manual Version 8 1 05 3 108 event 24x7 4 Definitions The Definition section encompasses all the screens that the user defines in the Event24x7
262. ltiple conditions Write a text message to CES or DES Even24x7 log file Send a text message to the CES log Send an email notification Send Parameters status via mail Send an immediate SMS notification Convert a file to Event24x7 variables Convert a single message to Event24x7 variables Optionally you can send them to Parameters Check address for connection Play file to get the operator s attention Display a variety of notification popup windows Schedule report via mail with printer counters Execute any external program at the Server machine Execute any external program under User credentials Remove a rule or group from memory Save a report for Open Problems on Event24x7 Restart current Event24x7 server Open Select statement Send User Variable from CES to DES Send User Variable value to a session Simulate receiving command to the Focal Point Send Parameter to DES Stop Start session Create and assign values to a User Edit variable Set a value to a Parameter bypassing a Collector String manipulation Sleep for a specified amount of seconds Send SMS message via internet Send SMS message via cellular modem Send or Get or Set SNMP requests for SNMP objects Send a SNMP Mib Trap Send a simple SNMP Trap 4 267 Tcpip Terms Voice while IB Application Log Record IB Application Pool IB Boot IB Command IB Consuming Processes IB Database IB Debug IB Disk Space IB Existence IB
263. m automatic actions xis yertio a Every Event24x7 s component has unique monitoring tools CES Rules Manages events coming from all DESs Use also as scheduler that distributes commands among DESs Definition Watch Manage by Exception and Pro Active approaches RES IB Session Execute locally at the target machine Performs actions locally and send the results to DES Event24x7 User Manual Version 8 1 05 1 27 event 24x7 1 7 2 Horizontal Axis Virtual Structure Event24x7 Service is actually a way to create views View is sub set of sessions and monitors from the physical structure that has common denominator Service Rule Perform actions when Service state changed The Rule Service let you Service intercept a change at any level of the service s component Service Session Monitor and Parameter Event24x7 User Manual Version 8 1 05 1 28 event 24x7 1 7 3 Depth Axis Staging Area Staging Area is a new layer on top of the monitoring environment It provides unique capabilities of eliminating white noises false alarms by true Root Cause Analysis assurance When Parameter state changes the Parameter s action statements executes immediately The Staging Area is new method to defer the execution In this stage Event24x4 verify the state of the Parameter s ancestors It might force execution of the ancestors in order to get their updated state When one of the ancestors has error s
264. m being triggered The Remove statement has the same effect as performing the Remove command from the Rule Status screen Event24x7 User Manual Version 8 1 05 4 237 event 24x7 4 3 56 Report Report Report Open Problems By Sessions Perform Create at CES Don t send to ope Purpose Write a dynamic report of open problems so one can go over it later Fields Report What to report two available options Open Problems By Sessions All the sessions listed one by one with a sub list of all the open problems pertaining to each session Open Problems All All opened problems listed unsorted in no specific order Perform Where to save and or display the results of the report specified 3 available options Create at CES Don t send to open Studio The results are saved and updated on the CES folder but not on the EventStudio folder thus will not be displayed on the Event24x7 Reports window Send Report to open Studio Open browser The results are saved and updated on both the CES and the EventStudio folders as well as being automatically opened for the user in a browser window display Send Report to open Studio Don t Open browser The results are saved and updated on both the CES and the EventStudio folders but without being displayed You must do it yourself via Event24x7 Details Use in case of critical or important triggers so you will keep a record of their occurrence Event24x7 Us
265. manipulation Fields Name Event24x7 variable name that is used as input Source Name of the Parameter Type Action type Substr Left Right Before String After String Before Delimiter After Delimiter From Position where to start and the length of the Length target Evaluate Check this field when setting numerical values Value It provides the possibility to set string fields Scope Variable scope Event24x7 User Manual Version 8 1 05 4 249 event 24x7 Local Local variables live in the scope of the rule they are executing at The moment the rule processing is terminated the variable is destroyed Local variables can t be accessed by other rules Server Server Variables scope is limited to the server they were created on It can be a DES or CES server The variable can be accessed by any rule as long as it runs on the same server Universal Universal Variables can be accessed by any rule that runs on any server in the Event24x7 cluster Event24x7 User Manual Version 8 1 05 4 250 event 24x7 4 3 67 Sleep SLEEP Purpose Delay rule execution Fields Seconds Delay seconds 4 3 68 SMS SMS From Number L 5L oo To Number Message Purpose Send SMS messages Fields From Number Sender To Number Target of the message Message SMS message body Details Send an SMS message Sending SMS is based upon SMS2U package You have first to acquire the SMS2U licenses Event24x7 User Manual Version 8 1
266. message to the CES or DES Server log file Field Text Message to be added to the LOG file Details Event24x7 Server has a log file and every important event is written to the log file automatically The Source part of the display message on the Focal Point appears as Perf Followed by the Monitor name Event24x7 User Manual Version 8 1 05 6 514 event 24x7 6 10 45 LOG User LOG User File File Name c test file log Purpose Create and handle a User log file for debug or control purposes Fields File Name Name of the User file Line Line to be added It can contain User or System variables Details Event24x7 will append a line to the specified file If the file doesn t exist Event24x7 will create it Event24x7 User Manual Version 8 1 05 6 515 event 24x7 6 10 46 Mail MAIL Type Regular BCL Data Specify Subject Image Purpose Send email Fields Type HTML C Mailing list HTML To LL Template Default Attachment Type Mone Default Serer Current Server Regular or Mailing List Event24x7 Mailing list is saved in the Script Definition For further information please refer to the Script Definition section Send mail with HTML support e The content of the Message part will be sent in HTML heading format e Anew system variable HHTMLRESULTALL will print out the contents of the result similar to PRMRESULTCHECK but with table HTML format
267. mmand to perform the Acknowledgement Notification SMS Immediate Send SMS via the wireless modem This is the simplest way to send SMS e From Parameter Properties tab 2 Enable Handle Notification Advantage single place to handle Opening and closing of problem Event24x7 User Manual Version 8 1 05 9 625 event 24x7 10 Skeleton Define Skeletons for all types of sessions Windows UNIX and Linux servers Network objects Agent RES Agentless WMI SNMP or TCPIP From each skeleton you can create as many sessions as you want and update all of them from one location Changes in the skeleton will affect all of the sessions created from it Session might be built from several Skeletons Event24x7 User Manual Version 8 1 05 10 626 eve 10 1 Skeleton Names Define and manage skeleton s entries From this window you can copy paste rename create new session from skeleton enable or disable all session that were created from a skeleton adjust sessions according to skeleton and open the Skeleton Definition ay Skeleton Names Dennton Group Windows Skeleton System 45400 DatabaseServers Discover Exchange HP InsightManager Jawa Group LINUX MessageQueue Networking SNMP Storage UNIX WebServers Windows ta ActiveDirectory Monitor Password 2 fa DCServices Community fa Ewent iewer fa Files4ndFelders i o System P Statistics i 4 ia System fa TerminalServer Created 2011 07 16 19 21 B W
268. mple gt If we would like to tell the rule processor to search for a variable at the Server level 2 first and then if it is not found to look for it in the Universal 4 name space then we should specify 6 as the variable s prefix 2 4 6 E g 6COUNTER gt If we would like to tell the rule processor to search for a variable at the Local level 1 first and then if it is not found to look for it in the Universal 4 name space then we should specify 5 as the variable s prefix 1 4 5 E g 5COUNTER gt If we would like to tell the rule processor to search for a variable at the Local level 1 first and if it is not found to look for it in the Server 2 name space and last at the universal name space 4 then we should specify 7 as the variable s prefix 1 2 4 7 E g 7COUNTER Event24x7 User Manual Version 8 1 05 16 689 eCVeNnt 24x7 16 2 System Variables System variables have the format of name The user cannot assign values to the system variables List of System variables DAY DAYOFWEEK DAYOFYEAR DATEKEY DDMMYYYY DDMMYYYY2 MMDDYYYY MMDDYYY Y2 YYYYMMDD YYYYMMDD2 MONTH MONTHNAME YEAR TIME TIMEO TIME2 LONGDATETIME LONGDATE RULENAME RULEGROUP SESSIONNAME WORDn Event24x7 User Manual Version 8 1 05 Day of month as a decimal number 01 31 Full weekday name Day of year as a decimal number 001 366 Date as 19950314 _ 12 41 29 Date as 14031995 Date as 14 03 1995
269. n Event24x7 User Manual Version 8 1 05 2 32 event 24x7 3 Configuration The configuration process employs a series of screens that establish the Event24x7 framework These screens include Distributed Event Servers DES and Sessions Service Users Profile Tables including Credential Downtime Server Studio Disable Notification The configuration group can be pulled down from the Configuration Menu at the top of the Studio screen The Server Sessions Users and Profile screens can also be accessed using the Studio icons Session is Event24x7 terminology for every computer or programmable device that Event24x7 will monitor A session should be defined for every remote computer or programmable device that Event24x7 will manage or monitor DES is container of Sessions Every DES has a list of related Sessions Defining DES is for advanced users Using single DES is enough for most of the cases DES handles the scalabilities option of Event24x7 It runs the Pro Active engine In cases that your network contains clusters of remote braches you can define a separate DES for each one of the clusters Event24x7 User Manual Version 8 1 05 3 33 event 24x7 3 1 DESs and Sessions Configuration The relation between DES and Sessions is 1 N The configuration screen has a tree structure Every DES at the top level has all its related sessions below dingy DESs and Sessions Scapa DES LOCAL DES E AGENTLESS E E
270. n Black Site Control Bar Arrange Icons ieee Entry Screen Aqua Bars User Interface State Colors Windows Screen Styles A Aoe saORPt S Ok TEATE EAA E ine Os 8 los ltt roe VA OG QOS SH TAQRANME PETELE en ee Edit Control PER pgeven rem e a clea seson contri ax Dp e i 5S TIR E Simple Shapes i set Fa E y Networ i ae Bho aes EMAIL LOCAL DES aN i GMAIL LOCAL DES Ce nter e LINUX LOCAL DES ON MODEM LOCAL DES x A e i SNMP LOCAL DES ene TCPIP LOCAL DES ke UNIX LOCAL DES rN j LOCAL DES REMOTEUNIX E e C lig pE ye 4 fam Lal oO 3 A a4 RS pz O x e m ax a Qi Pe c Log Site Control TriggerPlus Software Read _NUM_ Select the desired session and press the Set Session button Event24x7 will assign the selected session into the selected shape The result can be seen at the Map Control bar at the bottom Event24x7 User Manual Version 8 1 05 7 561 event 24x7 7 1 2 2 Link shape to a Service Select a shape that you want to link to a service At the right windows side there is Service bar Put the mouse over it and a services list window will be opened MOES gt DN Event24x7 Trial version days left 172 Diagram from NetworkMedium sdn N Gma em View Management Configuration Definitions Operation Help Terminal E x Novice User Default Cascade Windows O Full Screen Blue Silver Log Bar Expert User F
271. n check Event24x7 User Manual Version 8 1 05 6 378 event 24x7 6 5 4 1 5 Command Command Execute command at monitored computer Select FreeSpace Size Devicell from Wire LogicalDisk where Size gt AND Onvelype lt gt 5 BND DriveType lt gt 2 Specify command or request to execute The command s content should be adjusted to the target environment The above example shows a command to be executed at a managed Windows platform via WMI For UNIX platform use UNIX command like sar Windows agent less WMI session can execute regular Windows command When the command prefix is SYSTEM the string following the SYSTEM would be executed as a Windows command For example type SYSTEM cmd c netstat e Event24x7 User Manual Version 8 1 05 6 379 event 24x7 6 5 4 1 6 Copy Parameter Copy Parameter Vallues Session The collector takes the value of the existing parameter It is useful for example for creating Oracle statistics from any parameter Inserting Oracle records should be done under the Oracle Monitor since it holds the Oracle connection type The option allows taking the CPU value from any UNIX session and letting the Oracle monitor insert them into the Oracle database Event24x7 User Manual Version 8 1 05 6 380 event 24x7 6 5 4 1 7 CPU Usage Consuming Processes Process to check Leave Blank for all the Processes po Special command for Consuming Process check
272. nage the network components The group contains the following tools System Management Database Management SNMP Management FileWatch Control System Management and Database Management bring a different approach to the EventStudio Usually EventStudio displays results of actions that were performed at the monitored computers System Management and Database Management tools perform the action by themselves on the EventStudio computer Event24x7 User Manual Version 8 1 05 15 669 event 24x7 15 1 System Management When starting System Management the following screen will be displayed System Management performs ad hoc actions to services and processes of a computer It also provides an inventory list of the installed software When starting the System Management it begins with the local computer where the EventStudio is running To manage other computers select the Remote Machine radiobutton and as a result the following fields will be displayed 22 System Management Current Machine 0 Remote Machine Operating System Microsoft Windows 7 Professional Version 6 1 7601 Manufacturer Microsoft Corporation Computer Hame 4MIR HP Windows Directo C Windows Seral Number 00371 0E M 8992671 00005 Computer System Computer Manufacturer Mame Hewlett Packard Computer Model HP 220 CMT Workstation System Type xb4 based PL Total Physical Mernory 134078204 Domain TRIGGER User Name amir HP arnir System Proces
273. nd Password Password to be used for the command Command The command to send Details Send PsExec command to the target session Event24x7 User Manual Version 8 1 05 6 484 event 24x7 6 10 14 Command Special COMMAND Special Command ENTER i Session AGENT Purpose Send a special command to a monitored session Fields Command Choose a command to send from these available options ENTER TAB RESET HOME NEWLINE Blank BREAK EOF and a set of Control Key commands Session The session to which the command is sent to Choose a session from the session list Details The special command can t be sent by the ACTION COMMAND Event24x7 User Manual Version 8 1 05 6 485 event 24x7 6 10 15 CTM Condition Contral M Condition Actor Condition Hame 0AT CTM Server Purpose Operations on prerequisite conditions in the CONTROL M Server database Fields Action Add or Delete operations Condition Condition Name Name CTM Server Address of CONTROL M Agent Details Activate ctmcontb utility Event24x7 User Manual Version 8 1 05 6 486 event 24x7 6 10 16 CTM Jobs Control M Jobs Scheduling table Jobname Force 0AT CTM Server Purpose orders or forces one or more jobs from a Scheduling table in the CONTROL M Server database Fields Scheduling Scheduling Table name table Jobname Job name or mask of the job s to order or force Force Force or Order option ODAT The
274. nes Leave empty for single line Target Target address Can also be an Event24x7 variable that holds the target address Community Community OID OID to get its value Get lines Optional Get more lines starting from the requested OID Event24x7 User Manual Version 8 1 05 6 394 6 5 4 1 20 SNMP event 24x7 Get List Get specific list of OIDs value SHMF Get List Target SPHMONITORFIELD1 Community Versions 1 Port Leave empty for default Not found Cornvert not found to zero Target Target address Can also be an Event24x7 variable that holds the target address Community Community OID List List of OIDs to get their values Event24x7 User Manual Version 8 1 05 6 395 event 24x7 There are OIDs entries that have an internal table structure In the MIB it appears line after line Event24x7 knows to read the values and list them in a tabular format 6 5 4 1 21 SNMP Get Table SNMP Get Table Target SEHMONITORFIELD1 Community public Version a Method Selective according to Keys lndexest Add Index to Keps Primary OD 1 3 6 1 2 1 25 4 2 1 Target Target address Can also be an Event24x7 variable that holds the target address Community Community Indexes Numbers of indexes that exist for the table OID OID to get its value Key Specify the keys you want to get their values Event24x7 User Manual Version 8 1 05 6 396 event 24x7 6 5 4 1 22 SNMP Mib Get New
275. ng a new interceptor Delete TA Delete Delete the selected interceptor Apply RL Apply Save last changes in a file Event24x7 User Manual Version 8 1 05 6 412 event 24x7 6 6 1 General Tab Eventhonitor rape rror Description Priority Enable 0 Disable Status Statistics Created 2012 09 12 17 04 Changed 2012 09 12 23 37 By EWENT Name Unique identifier of the interceptor Description User s description of the interceptor Used for documentation Status Enable or Disable the interceptor Created Creation date of the interceptor Changed Date of last change By Name of the user who made the last change Event24x7 User Manual Version 8 1 05 6 413 vent 24x7 6 6 2 When Tab 4J Intercept Months Time All Y Jar v Feb 7 Mar v Apr May ov Jun Fa Re men Jul v Aug v Sep Oct Novy Dec From To WeekD ays All Mon Tue Wed WiThy Frio Sat Sun 00 00 Days J05 W OG 12 W13 All 719 21 J 2b OW 2r Daily Stop After Interval Ban Sim eher Mires Minubes Seconds Note This tab is of no relevance when working with interceptors because unlike Collectors which conduct their tests in a cyclic manner every time interval these tests are not self initiated but only take place when data is written into a file Event24x7 User Manual Version 8 1 05 6 414 event 24x7 6 6 3 Dependent Tab Define the pre requisite conditions for the exec
276. ng at The moment that the parameter s processing is terminated the variable is destroyed Local variables can t be accessed by other parameters Server Server Variables scope is limited to the server they were created on It can be a DES or CES server The variable can be accessed by any parameter as long as it runs on the same server Universal Universal Variables can be accessed by any parameter that runs on any server in the Event24x7 cluster Event24x7 User Manual Version 8 1 05 6 544 event 24x7 6 10 71 Sleep SLEEP Purpose Delay parameter execution Fields Seconds Delay seconds 6 10 72 SMS SMS Fiom Number 7 To Nube Message Purpose Send SMS messages Fields From Number Sender To Number Target of the message Message SMS message body Details Send a SMS message Sending SMS is based upon SMS2U package You have first to acquire the SMS2U licenses Event24x7 User Manual Version 8 1 05 6 545 event 24x7 SMS Wireless Humber Message Type J Serial wait till end Purpose Send SMS via cellular modem Fields Number Sender Message SMS message body Script Event24x7 script that defines the protocol Event24x7 should use in order to send the SMS Session Event24x7 Session name for the cellular modem Type Option of serial sending the SMS In this way it is possible to check the return code for success Details The advantage of using a cellular modem is by the fact tha
277. ning Auto LocalSystem aviguid iy Actives Installer Asina Stopped Manual LocalSystem Anats ey BitLocker Drive Encryption Semice Stopped Manual localS ystern BOESYL 4 1 gt The Services Tab shows all the services installed on the monitored computer and their Status Their icon is displayed at the left side 15 1 1 1 Service Operation Selecting a service and pressing the right mouse button will open a popup window with possible actions e If the selected service is Stopped you will be given the option to start it e If the selected service is Running you will be given two options to stop or restart the service According to your selection the service will be stopped started or restarted applicably Please note that for the services with the Disabled mode no pop up window will be opened since no action can be done Event24x7 User Manual Version 8 1 05 15 671 event 24x7 15 1 2 Processes Tab Process ID Handle Threads if System Idle Process 0 g i System 3354 155 ie m33 EXE J 2 ie avgisa exe 2219 122 av gesa AXE l ede 23 E CESS KE 1205 ie Wwininit exe l oF ney CESS Ge 1021 ie winlogon exe I 120 SEIVICES ENE l 345 ie sags exe 1095 e lem exe i 208 ie svchost exe 42 ie nvVEVC ERE 133 El nvSCPAPISwr exe l 110 ie svchost exe tal The Processes Tab shows information about all the running processes 15 1 2 1 Process Operation Selecting a process and pressing the right m
278. nnected and Ready AL DES Modems Status hE is eaan oaie B LOCAL DES Modem Logs Pio re 06 Sep 2010 13 45 06 Sep 2010 13 45 06 Sep 2010 13 45 06 Sep 2010 13 45 06 Sep 2010 13 45 06 Sep 2010 13 45 06 Sep 2010 13 45 06 Sep 2010 1343 06 Sep 2010 13 43 06 Sep 2010 13 43 06 Sep 2010 1343 06 Sep 2010 13 43 06 Sep 2010 13 43 ATHCMG5 4 97 2522265805 47 CMGF 1 AT ENMI 1 0 0 0 DD Dn mmm mo om om oh om om om 47 ChMI ai Status Wait For Acknowledgement Get Ok CMGS 63 Ok Ok Ok Ok CNMI 0 2 00 39 00 25 0 25 00 1 Ok Retrieves the status of the modems connected to the selected DES Select requested DES and select the operation to display Available Operations e Tickets Display alert sending status Event24x7 User Manual Version 8 1 05 5 353 event 24x7 e Modems Status Display connected modems status e Modem Logs Display connected modems logs Event24x7 User Manual Version 8 1 05 5 354 eve 5 14 Workflow Status in Workiow statis DES LOCAL DES gt i Active Y History Workflow WMIFS 1400589 105 4272 WMIFS 1400589047 42 72 WMIFS 1400586 110 4272 WMIFS 14005257 76 2216 WMIFS 1400525744 22716 WMIFS 1400525592 2216 WMIFS 1400525535 22716 The Workflow status screen displays the status of every workflow that is currently running or ran in the past The
279. ns and select the Group name and the Project name Then click OK N Ale Handle a Eq aa ta Database fa Excel fi wMIFS Grow fk r E e Open Project Click the Open button from the operation buttons and select the Project name to open Then click OK N fle Handle a A oA ta Database ta Excel fia wMIFS Event24x7 User Manual Version 8 1 05 11 634 CVCNUI4x7 Click on the Build button from the operation buttons and then click on the Yes button to start the deployment of the current project Conhthmaton Start Building Project 7 Event24x7 User Manual Version 8 1 05 11 635 event 24x7 11 2 DES object 11 2 1 DES Properties Pane Properties Pane 4 LOCAL DES Node Caption Enable 4 Connection Port Connection Type IP Address Caption Enable Group Type Port Connection Type IP Address ai x LOCAL DES Enable TCPIP 127 000 000 001 DES s name DES s Status Enable Disable Group name Object type Port number Connection Type Available options TCPIP HostName IP Address Event24x7 User Manual Version 8 1 05 11 636 CVENT 24x7 11 2 2 DES Properties for Project LE Ges Properties tor Project Rule at Startup Name Type Single Rule Entire Group Target CES DES Debug AuleCheck Debug Level Number of Processes CES connection Staging Area Double the time for no Ti t IF l connection decision moe DEEE o Log file blas log
280. nstallation For example in cases where Event24x7 intercepts User log files and the log names have a fixed suffix but the prefix Drive and installation disk is different from site to site When defining the Log file name with the User variable 2LOGPATH prog2 madata log the user variable should be changed only once Event24x7 User Manual Version 8 1 05 4 300 event 24x7 4 7 8 Downtime When a Downtime for sessions and monitors is required it is possible to create a Downtime Script Group with a unique name that will hold the lists of the sessions and monitors This way each time that the same group of sessions and monitors is required for downtime operation it can be used easily by stating its name in the Downtime Monitors tab when the From External File box is checked E X Downtime Down T ime Operation Details Downtime AGENTLESS Sustem Session AGENTLESS ki Downtime AGENTLESS 5NMFSpsterm Monitor SNMPSystem Purpose Select Sessions and Monitors for Downtime Fields Session Session name Monitor Monitor name Event24x7 User Manual Version 8 1 05 4 301 event 24x7 4 8 Voice definition Voice Definition allows defining voice actions to be executed at the EventVoice Server Voice actions use a Dialogic voice board to perform computer to human phone conversion It allows for example automatic dialing to the system programmer s cellular phone telling him the error message and asking him
281. nt24x7 User Manual Version 8 1 05 12 655 eve 12 8 Event24x7 User Experience Recorder The Event24x7UserExperienceRecorder tool allows you to record a series of actions done by a user in order to simulate them later by the Event24x7 system Event24x7 User Experience Recorder Untitled O D E8 Record g Options Edit Insert erp Start Run Recording Script Ca V Follow Focus Start Script Start Script with IE with Program automator run iexplore nohome FOLLOW_FOCUS a 2 automator wait 10000 automator key press ALT d automator wait 1000 automator type_text http www triggerplus com automator wait 5000 TimeStamp 1 automator get_timestamp automator key press ENTER rc automator find text TriggerPlus 10000 2 automator write_ output file find TriggerPlus re r n i if re gt 0 then i TimeStamp 2 automator get_timestamp i automator write output _file TimeDiff www triggerplus com TimeStamp 2 TimeStamp 1 r n else automator write_output_file TimeDiff www triggerplus com i r n i automator quit end 2 automator wait 4000 2 rc automator ClickControl fromfile 0 single left click the Free Download control i the selector is taken from the ControlFile txt line 0 2 i automator write_output_file clickcontrol fromfile0 rc r n 26 if rc 0 then i
282. o be added in the Monitoring Definition Parameter s State Tab with the same effect The Alert is handled from the Alert Screen Event24x7 User Manual Version 8 1 05 4 185 event 24x7 4 3 6 Backup Backup Directory At the above target directory Eventide Will add the following Backup directory Event dey Backup dater stime Purpose Backup the user s configuration files Fields Target Place to write the backup files Directory Details It is important to take a backup occasionally of the user s configuration files Note The Backup command can also be added in the Monitoring Definition Parameter s State Tab with the same effect Event24x7 User Manual Version 8 1 05 4 186 event 24x7 4 3 Beep BEEP Purpose Play a beep on the PC internal speaker Fields Frequency Frequency in hertz of the sound This parameter must be in the range of 37 through 32 767 0x25 through 0x7FFF Duration Duration in milliseconds of the sound Details The Beep function generates simple tones on the speaker Note The Beep command can also be added in the Monitoring Definition Parameter s State Tab with the same effect Event24x7 User Manual Version 8 1 05 4 187 event 24x7 4 3 8 CASE CASE Purpose Add CASE clause to the SELECT clause Fields expression Details Two lines are added to the actions command CASE expression CASE END You can add action statements between the above lines and t
283. ocesses on IB and start or stop one Check CPU memory handles or thread count Start a service Perform User Folder s Files Watch Watch any user log file It could be a simple text file or some application log file Perform a WMI command on the local RES In addition there are also group of Directory and File Watch Event24x7 User Manual Version 8 1 05 4 268 event 24x7 Directory Watch Report on any file changes at the specified directory File Find Find files with specific attribute at a specified directory Event24x7 User Manual Version 8 1 05 4 269 event 24x7 4 6 Action Parameters for Information Base 4 6 1 IB Application Log Record IE Application Log Source Eventede Eventid 22 Type Warming ever Text Purpose Add a record to the Application Event Viewer Fields Source Event Id Type Text Event24x7 User Manual Version 8 1 05 The originator of the new event viewer record Can be either Event24x7 or NiceTrack Event ID of the new record Select between the supported types Contents of the new record 4 270 event 24x7 4 6 2 IB Boot IB Shutdown Restart Session SGENTLESS Purpose Shutdown or restart the remote computer or device Fields Type Choose action type ShutDown Restart Win32 Shutdown Options Session Select session on which to perform above shutdown or restart operation Event24x7 User Manual Version 8 1 05 4 271 event 24x7
284. of Timeline PRM Name PRM Occurrences PRM Quantity PRM Set Value PRM SNMP Auto Creating PRM State PRM Threshold PRM Threshold Differential PRM Threshold Summary PRM Value IB Date 6 9 5 STAGING AREA 6 9 6 DISPLAY TAB 6 9 6 1 6 9 6 2 Display Type Chart Statements 6 9 7 ACTION TABS 6 9 7 1 Action NotRunning 6 10 ACTION PARAMETERS FOR MONITORS 6 10 6 10 2 6 10 3 6 10 4 6 10 5 6 10 6 6 10 7 6 10 8 6 10 9 6 10 10 6 10 11 6 10 12 6 10 13 6 10 14 6 10 15 ACTIVATE IB ACTIVATE RULE ALERT BACKUP BEEP CASE CHANGE COLLECTOR INTERVAL CHARTS CHECK THRESHOLDS CLEAR TEXT COMMAND COMMAND DOS COMMAND PSEXEC COMMAND SPECIAL CTM CONDITION Event24x7 User Manual Version 8 1 05 1 12 6 431 6 432 6 434 6 435 6 436 6 438 6 439 6 442 6 445 6 446 6 447 6 448 6 450 6 451 6 453 6 454 6 455 6 456 6 45 7 6 458 6 459 6 460 6 461 6 462 6 463 6 464 6 465 6 466 6 46 7 6 46 7 6 468 6 471 6 472 6 472 6 473 6 474 6 475 6 476 6 477 6 478 6 479 6 480 6 481 6 482 6 483 6 484 6 485 6 486 6 10 16 6 10 17 6 10 18 6 10 19 6 10 20 6 10 21 6 10 22 6 10 23 6 10 24 6 10 25 6 10 26 6 10 27 6 10 28 6 10 29 6 10 30 6 10 31 6 10 32 6 10 33 6 10 34 6 10 35 6 10 36 6 10 37 6 10 38 6 10 39 6 10 40 6 10 41 6 10 42 6 10 43 6 10 44 6 10 45 6 10 46 6 10 47 6 10 48 6 10 4
285. of the check Example Memory Memory utilization IF VALUE gt 80 THEN Message Warning Memory reached 80 THEN END Event24x7 User Manual Version 8 1 05 6 503 event 24x7 6 10 36 IB Performance IB Performance Monitor Cycles Wal mech Helper Dialog Purpose Retrieve values from the Windows Performance Monitor Fields Object Performance monitor variable For the Counter correct value open the performance Instance monitor and take the values from there Computer Computer name when required remote value For local computer leave it blank Cycles Number of times to perform rechecks in order to ensure that the result is as precise as possible Wait Time to wait in milliseconds after each check before conducting a recheck Details Retrieves performance Monitor values Has similar values as the ones you get by running the Windows Performance monitor Type perfmon from the command line You can press the Helper Dialog button too to assist you in selecting the exact checks to perform from the perfMon Event24x7 User Manual Version 8 1 05 6 504 event 24x7 6 10 37 IB Performance VB Script IB Performance Monitor via YB Script Cass o Dbjest Instance o Computer Leave empty for local Purpose Retrieve values from the Windows Performance Monitor via use of a VB Script Class Performance monitor variable For the Object correct value open the performance Instance monitor and take the values f
286. of the message Fields String String to search Method Method to use for finding the string e Simple string search e Using wildcard search with and in pattern means any characters and means a single character Case Whether the search is sensitive to upper case or lower case letters Type Search only logs of this type for the above string Possible types are None Don t Check Error Warning Information Failure and Success Source Search for specific Source from the header Category Search for specific Category User Search for specific User name Event ID Search for a specific Event ID Event24x7 User Manual Version 8 1 05 4 169 event 24x7 You can specify up to two Event IDs in a single request 4 2 4 5 Identify Parameter IDENTIFY Attribute Arny hi Purpose Perform action based upon the Message ID part of the incoming message Fields Identify Message ID of the message Field is in Alphanumeric format Wildcard and can be used Attribute Attribute of the message Available options Any Normal High Intensity Details What Identify enables Rule to be triggered by specific messages based on their Message ID Event24x7 User Manual Version 8 1 05 4 170 event 24x7 Message ID is valid only when the target session has a Message ID For example MVS AS400 Example Identify IEF Every message id that has an IEF prefix 4 2 4 6 Parameter PARAMETER State OF Vue
287. oftware Please note that gathering the software might take some time Event24x7 User Manual Version 8 1 05 201 40525 201 40425 20131114 20131114 20131114 20131114 20131114 20131114 20131114 20131114 20131114 20131114 20131114 20131114 20131114 15 673 event 24x7 15 2 Database Management When starting Database Management the following screen will be displayed Database Management Options DB Alias Stored Procedure Map result Fls length in table format ha ORCL 7 Quer User ID Load Passuvord Execute Query Result Connect Fi K 47 Background Bar Database Management manages Oracle and SQL databases Oracle client must be installed at the same computer where the EventStudio is running In order to gain control you must first perform a login to the database Until you login all the Database Management tabs will be locked and can not be used Fill the DB Alias Host String User ID Password and press the Refresh button to login to the database Event24x7 User Manual Version 8 1 05 15 674 event 24x7 15 2 1 Query Tab Options Stored Procedure Map result Fle length in table format h Query Load Execute Query Query Tab is used for performing a user query against Oracle Type the query you want to execute at the Query windows and then press the Execute Query button The query result will be displayed on the Result window Load and Save buttons allow us to save
288. omponents or to send unauthorized messages to the CES The security mechanism has three layers Event24x7 signature Each packet sent from an Event24x7 component has a unique structure that contains an Event24x7 signature A packet that does not comply with the Event24X7 structure and signature will be rejected automatically Compression Compression has two advantages better security and increased performance Packet compression is optional It can be set separately on each side of the communication It is possible to have single sided compression Secure Sockets Layer The SSL is based upon OpenSSL OpenSSL provides a general purpose cryptography library as well as the Secure Sockets Layer v2 v3 SSLv2 SSLv3 and Transport Layer Security v1 TLSv1 network security protocols SSL uses Public key cryptography for cryptographic algorithms The algorithm uses two keys each of which may be used to encrypt a message If one key is used to encrypt a message then the other must be used to decrypt it This makes it possible to receive secure messages by simply publishing one key the public key and keeping the other secret the private key Anyone may encrypt a message using the public key but only the owner of the private key will be able to read it Because of Public Private keys approach using the SSL in Event24x7 is bidirectional It means that the two sides must negotiate and exchange keys The Server is responsible for stating the n
289. onment Send commands via Event24x7 Gateway Event24x7 server upon which to start the program This is transparent the program execution within its own servers 4 121 event 24x7 4 1 4 3 Execution 4 1 4 3 1 DES Command Purpose Issue a DOS command from local DES Fields Command The command to issue 4 1 4 3 2 Get CPU Purpose Get CPU usage of a server or a process Fields Type Usage Server Server s IP or name Process Process name or empty for total CPU usage Event24x7 User Manual Version 8 1 05 4 122 event 24x7 4 1 4 3 3 Performance Monitor Purpose Retrieve a Windows Performance Monitor counter value Fields Object Object name Counter Counter name Instance Instance name Server Server name Cycles Number of cycles Wait mSec Default is 300 mSec Format Long Double Large Event24x7 User Manual Version 8 1 05 4 123 event 24x7 4 1 4 3 4 Port Scan Purpose Perform port scan Fields Type Object type Available options TCP UDP Both Server Server s IP or name Ports Specifying ports Single port to query range 1 65535 List of ports to query lt 22 23 161 gt Range of ports lt start end gt Event24x7 User Manual Version 8 1 05 4 124 4 1 4 3 5 Http Purpose Type Server Proxy Not Found Find String Results Event24x7 User Manual Version 8 1 05 event 24x7 Perform WinHttp or WGet command Available options e Internal WinHttp Event24x7 perform GET and
290. onnection Tab 3 1 2 3 1 Interface Tab Interface Setting event 24x7 Number of Minutes to force execution of elements in the Staging Area The maximum size in Giga Bytes that a log file can occupy before it starts to rewrite itself The maximum number of times that a certain check collector and parameter can stay in the running state before the DES must be restarted Connection TCPIP hi Security Compression Secure Sockets Layer Connection Security Defines the connection method to DES Possible values are TCPIP and Pipe Tick compression box if you want to send compressed messages Tick Secure Sockets Layer for SSL communication Event24x7 User Manual Version 8 1 05 3 38 event 24x7 3 1 2 3 2 Settings Tab Interface Setting d Host Name P Address Port Each type of connection has different parameters to control its operations The parameter tab varies according to the connection type chosen from the Connection Tab TCPIP connection Host Name IP Address Port Pipe connection Server Suffix Event24x7 User Manual Version 8 1 05 TCP name IP address of DES TCPIP communication port IPX server name or period for current machine Named pipe file suffix to make the Pipe Name unique 3 39 3 1 2 4 Email Tab event 24x7 Email parameters usually defined at CES level and distributed to all DESs This option lets you specify a different ema
291. or forces jobs from a Scheduling table load balancing algorithm for CONTROL M Performs operations on the Quantitative Resources table Sends a message to the specified user or destination Display a message to the focal point Add an ELSE line to the IF THEN statement Add an ELSE line to the IF OBJECT statement Part of the If Parser command the statements following the Else parser are performed when the IF parser conditions are not met Stop the execution of the current rule Send file to EventStudio Check availability of URL Record a specific event in an Event24x7 log file Restart options for the specified session either Shutdown Restart and Win32Shutdown options Refers to the Performance monitor gives you the option to monitor specific objects that exist inside the perfMon on the related RES server Like the previous command refers to performance monitor objects but in this case with the use of a VB script Check all the existing processes running on a server Have the option to start or stop a specific process Check internal resources of an existing server Either CPU Memory Handles or Thread Count Check server s existing services Have the option to start stop restart or just check the status of a specific Service Open IF THEN statement Open IF Object statement Open IF THEN compiled statement like IF but for multiple conditions Write a text message to CES or DES Even24x7 log file Write a t
292. or scheme is according to the Status Green Active Yellow Connecting Violet Init Red Error White Disabled Event24x7 User Manual Version 8 1 05 5 345 event 24x7 The Rule Status screen displays the status of all the active rules A rule becomes active when Activate is performed from the Rule Definition screen See Rules Definition and Action Parameters for Rules sections Kies statis trom 05 26 7014 7371034 amp x CES Server Th Group Name Rule Name Description Count Status AuditAlert Sending email CMD_PLAYFILE Play File reques CMD Performs ad ho StartLogWatch Sending email A rule might have the following statuses Active i Rule is ready to be triggered Hold Rule is not eligible to be triggered The rule status was changes to Hold It has to be released before it will be eligible to execute Waiting wit Rule is not eligible to be triggered The rule was activated but at least one of its parameters was not set The reason might be the Time and Date from the When tab or due to a Term that was not set When the problematic parameter is set the rule becomes Active Running LE Rule is currently executing Toolbar o Ea Hold Change Active Alert to Hold status Return Hold Alert to Active status Remove Alert from the Activate list Servers list Choose Event24x7 session to focus on Event24x7 User Manual Version 8 1 05 5 346 event 24x
293. order not to lose information Event24x7 User Manual Version 8 1 05 14 666 event 24x7 14 1 Toolbar Setup ya Open the Terminal Setup screen Toggle Command line 14 2 Terminal Setup Terminal setup Ol Fonts E Color Items E hom E Normal High _ RGB 255 192 203 fy RGB 255 173 91 ae _ RGB 255 255 0 me oe aaa Bc 1s 95 5 Protected High Screen Protected High intencty color Wf Ok x Cancel The terminal setup lets you adjust the font and the background color of the terminal Event24x7 User Manual Version 8 1 05 14 667 event 24x7 14 3 Changing Font Choosing the font causes the Font dialog to open Tp Footlight MT Light os F Forte Bold Italic Fp Franklin Gothic Book Fp Franklin Gothic Demi Tf Franklin Gothic Heavy aBbYyzZz 14 4 Changing Color items The Terminal display has two sections At the top you see the incoming messages Some consoles like MVS and AS400 have also a status section at the bottom of the screen In this area the remote system displays information regarding the system The setup terminal screen let you determine every one of the terminal color components Adjust the looks of the terminal according to your preferences Event24x7 User Manual Version 8 1 05 14 668 eCVeNT 24x7 15 Control Center The Control Center is a set of tools that help the operator or administrator to handle its environments It allows ad hoc activities to ma
294. orking UNIX Linux Snmp e The Project screen has three parts o Project Toolbox The Toolbox is located at the left pane of the screen and displayed in a tree structure It contains the list of all the predefined Project objects DES and Sessions Windows Agentless Windows Agent Windows Snmp Networking UNIX Linux Snmp o Project Definition The Project definition pane is at the center of the screen In this section the Project structure is created o Project Properties The Project properties pane is at the right of the screen This section is used for providing the specific properties for each one of the Project objects Event24x7 User Manual Version 8 1 05 11 632 event 24x7 o Project screen operation buttons SFeRABtaBom X BW A buid New Open Save Save As Cut Copy Paste Undo Redo Delete Fit to Window Create from current Build Verify Ee r DEP wl Event24x7 User Manual Version 8 1 05 Create a new project Open an existing project Save current project Save current project with different name Cut a single project object Copy a single project object Paste a project object Undo do last change Redo last change Delete selected object Automatic fit project to screen Create new project from current configuration Deploy configuration from current project Not active in project definition 11 633 event 24x7 Click the Save As button from the operation butto
295. ouse button will open a popup window with the possible Terminate action Choosing this action will terminate the selected process Event24x7 User Manual Version 8 1 05 15 672 event 24x7 15 1 3 Software Tab Sia Wise Installation Studio 7 0 SP ity Check Point Deployment Shell ity Microsott Application Error Reporting ey Microsott DCF MUL English 2013 Sia Microsott OneNote MUI English 2 ity Microsott Office OSM MUL English ey Microsott Office OSM Us MUI E ngl Sia Microsoft InfoPath MOI English 20 Sia Microsoft Access MUI English 2013 Bey Microsoft Office Shared Setup Meta Sia Microsoft Excel MUI English 2013 Sia Microsoft Office Shared 64 bit Setu ity Microsoft Access Setup Metadata iby Microsoft PowerPoint MUL English Bey Microsoft Publisher MUI English 2 ity Microsoft Outlook MUI English 2013 4 Check Point Microsott Corpor Microgott Corpor Microgott Corpor Microsott Corpor Microgott Corpor Microgott Corpor Microsoft Corpor Microsott Corpor Microgott Corpor Microsoft Corpor Microsott Corpor Microgott Corpor Microsoft Corpor Microsott Corpor 73 250 9 00 0000 12 0 601 2 5000 15 0 4420 1017 15 0 4420 1017 15 0 4420 1017 15 0 4420 1017 15 0 4420 1017 15 0 4420 1017 15 0 4420 1017 15 0 4420 1017 15 0 4420 1017 15 0 4420 1017 15 0 4420 1017 15 0 4420 1017 15 0 4420 1017 The Software Tab shows inventory of the installed s
296. owntime will start once the rule is activated according to it s When tab The Downtime will end according to the Time End selection in this action Event24x7 User Manual Version 8 1 05 4 181 event 24x7 Details Activate predefined Downtime for a period of time or until a specific time 4 3 2 Activate IB ACTIVATE IB Hame Group Type Group Single Information Base 0 General IB 1B for specific Session Parameter 00 mn IF Curent taled send to CES Sesion 0 Purpose Activate Information Base at a specific Event24x7 RES smart agent Fields Name Name of a single IB or Group of IBs to activate Group Choose IB or group of IBs Type Choose target single IB or entire Group of IBs Parameter From Determine from which server to take the IB to send Current Server or ask CES to send Session Session to receive the Information Base Choose a session from the list of defined session if Event24x7 Details Activate Information Base on a specific session Has the same result as Activate IB from the IB definition screen and the Monitoring Definition Parameter s State Tab Event24x7 User Manual Version 8 1 05 4 182 event 24x7 4 3 3 Activate Rule ACTIVATE RULE Hame Type 0 Rule Group From Current Server Cemer LES Server Purpose Activate a Rule Fields Name Name of single Rule or Group of Rules to activate Type Choose as a target either a single rule o
297. pad exe FOLLOW WINDOW automator wait 2000 automator type text triggerplus com automator wait 2000 automator type text ewerwe automator wait 2000 automator type text triggerplus com automator wait 2000 automator type text sdfisdfisd automator wait 2000 automator type text triggerplus com automator wait 2000 automator type text gegeerer automator wait 2000 ret automator find text triggerplus 4000 automator write output file find text return value rP om Mron automator wait 2000 automator key press ALT F4 Illl Event24x7 User Manual Version 8 1 05 12 646 12 3 User Experience Interceptor Define User Experience Output Interceptor Monitoring Lennin Session UserExperience Exception UserExperience i H UserExperience SPUBLWLUOA JE Ups Name UserExpenence ah Description Y corn Change Enable _ Disable Statistics Peded 2014 05 27 11 58 Changed OoOo By EVENT Status DES if New iy Delete ii Apply Event24x7 User Manual Version 8 1 05 12 647 event 24x7 12 4 Intercept Tab The Intercept tab is used to catch the output of the User Experience simulation All that is written to the output file using the command automator write_output_file text for output file will be caught by the interceptor and can be then parsed by the Event24x7 parameter User Expenen
298. path gt Log lt server gt _Y YY Y MM DD log Where YY YY MM DD represents the current date lt server gt _ represents Event24x7 Server name CES DES or RES Event24x7 User Manual Version 8 1 05 3 97 Backup Directory Number of Rules Check Alerts Automatic Closing Number of saved Alert History Appearances Rule Status Interactively Replace PrmState Event24x7 User Manual Version 8 1 05 event 24x7 Each day at 00 00 the log is replaced automatically by the Event24x7 server The log file contains important messages for problem determination More information is available on this subject in the Problem Determination chapter later in this manual This parameter sets the debug level Available values Normal Show only critical error messages This is the default Warning Show critical and warning messages Error Show all messages Specify default location where to save backup Backup command saves all the user s configuration files Backup command is part of the Management menu If no location is specified the default location of the backup iS lt CES installation gt Runtime Backup Number of concurrent processes that check Rules for triggering The default is one Change this number only if you were advised to do so by Event24x7 s technical support Change the automatic closing Alerts behaviors When problem was fixed and as a result the alert should be closed The default action is to delete the ale
299. pe from one of the tabs and drag and drop it over the canvas There are two types of shapes e Simple shapes Any one of the first five tabs like Rectangles Diamonds etc e Composite shapes Shape that were brought from external resource usually assembled from several simple shapes You can create your own shapes by combing or removing several shapes Common used external shape can be kept at the Edit Control You can paste a shape on the Edit Control to let Event24x7 keep it to be part of the Edit Control shapes 7 1 1 2 Tool bars There are six different toolbars around the canvas that assist you in getting the required result The Toolbars help you to format Align create shapes and manipulate them Event24x7 User Manual Version 8 1 05 7 559 vent 24x7 The Event 24x7 Main Menu is a sensitive one When you open the Diagram Definition window or select the Diagram Definition a sensitive Diagram Tolls is open at the Main Menu 7 1 1 3 Main Menu 3 IG e gt lt Diag ram Tool j Event24x7 pe sie days left 172 Diagram from NetworkMedium sdn q View Management Configuration Definitions Operation Help Design Layout Terminai 8 x N Free Rotate JN Flip Horizontal Align Left if Align Top Allow main object E Same Width FI Center In form Horizontal Jef Space Across Ei Nudge Left jj Nudge Bottom A Rotate Left Flip Vertical amp Align Center a Align Middle ff Same Height Center In form Ve
300. pecify whether the intermediate resulting file of the collector will be automatically deleted after it s been used This is only valid when the In Memory option is off For the debug process you can leave this file and view it The temporary files are kept in the directory lt DES installation directory gt Temp Created Creation date of the collector Changed Date of last change By Name of the user who made the last change Event24x7 User Manual Version 8 1 05 6 372 event 24x7 6 5 2 When Time Jan x Feb x Mar v Apr Ma vf Jun Jul Aug Sep w Oct wv Noy v Dec Al Z Mon Tue Wed J Thy Fn wv Sat Sun Days No Restrictions From Jo voo wo vidd vos Jog vog wiio 711 W12 All 715 Vib wli wig W119 ofA 2a Wed W 25 OW 26 729 Vo WwW Sl Daily Stop After Interval Delay Start Daily Process Stop after Minutes Minubes Seconds 30 Define when to schedule the Collector Fields have the same meaning as in the When Rules tab The field Stop After has an important role of passing parameters to the collector when the connection is established Event24x7 User Manual Version 8 1 05 6 373 event 24x7 Define the pre requisite conditions for the execution of this collector Parser OP Parser Variables Operation Details OP Parser 1 11 00 Sn Walue 1 PA7OARAREADYSAGENTLESS Expression 7 11 00 If conditions defined fail to exist on a cycl
301. r Always The search for system variables process occurs every time prior to the collector execution If Needed Let Event24x7 determine the required approach Parameter value is provided from external Let the Parameter execute the command based on IB Use ADSI protocol LDAP to test the Active Directory Measure the bandwidth of current interface cards Specify the command to execute Perform PsExec command Copy parameter and use any other existing parameter Used for Consuming Processes Request that address database Oracle SQL etc Perform any command from DES PC Perform Exchange Inbox remote command Perform file status or copy file to Parameter For file size watch dog Check availability of URL Perform perfmon counter Check access to a TCPIP address Check that selected Ports listening Perform PowerShell command Get OID object value from Mib Get List of OIDs from Mib Get objects from Mib that have sequencers Event24x7 displays the result in a tabular format Perform telnet check The collector value comes from an external source like Rule Easy check for Windows objects Service Process Resource etc 6 376 event 24x7 Using Event24x7 Variable in Collector When defining an activity for a Collector You can use Event24x7 System variables prefix of and global User variables prefix in the request See Special Variables section for more details When the Collector executes it first che
302. r an entire group of rules From Determine from which server to take the Rule Current Server or ask CES to send Server Server to activate the rule Details Activate Rule This has the same result as Activate Rule from the IB definition screen and the Monitoring Definition Parameter s State Tab Event24x7 User Manual Version 8 1 05 4 183 event 24x7 4 3 4 Activate Workflow ACTIVATE Workflows Hame VW MIFS hai Server LUCAL DES h Purpose Activate a Workflow Fields Name Name of workflow to activate Server Server to activate the workflow Details Activate Workflow on the selected DES Event24x7 User Manual Version 8 1 05 4 184 event 24x7 4 3 5 Alert ALERT 0 Do not change Severity Warning C Error Severe Severity Purpose Create a new Alert in the Event24x7 alert system Fields Operation Choose the operation Add Update two modes or options Changed only or Changed if Exist Add if not or Delete Message Alert message Severity Choose severity type The Alert background displayed with the color according to the severity Warning Yellow Error Orange Severe Red Status Set the alert new status If the operation is Assigned then specify also the user name at the right field Details Alert is Event24x7 s component which signals to the operator that a problem exists The Alert remains active until the problem has been resolved Note An Alert command can als
303. r example Date format Date format DDMMYYYYHHMMSS 15042005 173255 DD MM YYYY HH MM SS 15 04 2005 17 32 55 MMDDYYYYHHMMSS 04152005 173255 MM DD YYYY HH MM SS 04 15 2005 17 32 55 YYYYMMDDHHMMSS 20050415173255 YY YY MM DD HH MM SS 2005 04 15 17 32 55 YYYYMMDDHHMMSS 200504 15023340 000000 This date format is the result of Date fields retrieves by WMI request You can create a User variable that is in the date format for use with the date function by using the Event24x7 system variables For example DDMMY YYY TIME Example for using the Date function IF DIFFDDMMYYYY2 2CHECK6 gt 120 THEN Do something THEN END Event24x7 User Manual Version 8 1 05 17 701 event 24x7 17 3 2 Size Functions The Size functions format size in bytes for print out It takes the size and converts it to a string with G M or K sign 17 3 3 Service Status Functions The Service status function translates the return code of the service status into a real explanation SERSTATUS Parameter is the Status return code 17 3 4 Table Lookup Functions The Table Lookup function translates numeric values into string LOOKUP lt script table gt lt number gt Event24x7 User Manual Version 8 1 05 17 702 event 24x7 STRFIND usage STRFIND lt string1 gt lt string2 gt Returns 1 if the first parameter contains second string Returns 0 does not contain STRSUBSTR STRSUBST
304. rameter Top Values Top 10 6 5 4 1 25 6 List of Sensors 6 5 4 1 25 7 Sensor Values 6 5 4 1 26 Web Access 6 5 4 1 27 Windows Object 6 5 5 VERIFY TAB 6 6 INTERCEPTOR DEFINITION 6 6 1 GENERAL TAB 6 6 2 WHEN TAB 6 6 3 DEPENDENT TAB 6 6 4 6 6 4 1 6 6 4 2 6 6 4 3 6 6 4 4 6 6 4 5 6 6 4 6 INTERCEPT TAB Event Viewer Identify Information Base IB SNMP String User Experience 6 7 FILE WATCH DEFINITION 6 7 1 GENERAL TAB 6 7 2 FILE WATCH TAB 6 7 2 1 6 7 2 2 6 7 2 3 User File Folder Files Event Log Event24x7 User Manual Version 8 1 05 1 11 6 379 6 380 6 381 6 382 6 383 6 384 6 386 6 38 7 6 388 6 389 6 390 6 391 6 392 6 393 6 394 6 395 6 396 6 39 7 6 398 6 400 6 401 6 401 6 402 6 403 6 404 6 405 6 406 6 407 6 408 6 409 6 410 6 411 6 413 6 414 6 415 6 416 6 417 6 418 6 419 6 420 6 421 6 423 6 424 6 426 6 427 6 428 6 429 6 430 CVeENT 24x7 6 8 IBs DEFINITION 6 8 1 GENERAL TAB 6 8 2 WHEN 6 8 3 ACTION 6 9 PARAMETER DEFINITION 6 9 1 GENERAL TAB 6 9 2 PROPERTIES TAB 6 9 3 CREATE TAB 6 9 4 STATE TAB 6 9 4 1 6 9 4 2 6 9 4 3 6 9 4 4 6 9 4 5 6 9 4 6 6 9 4 7 6 9 4 8 6 9 4 9 6 9 4 10 6 9 4 11 6 9 4 12 6 9 4 13 6 9 4 14 6 9 4 15 6 9 4 16 6 9 4 17 PRM Consecutive PRM Consecutive Groupset PRM Differential PRM Force Action PRM List Values PRM Measure
305. rceptor and Parameter while the FileWatch monitor is comprised of only two Monitor and FileWatch NOTE The Exception monitor can also work independently when requested to intercept specific SNMP traps and messages or specific Information Base elements Event24x7 User Manual Version 8 1 05 6 357 event 24x7 The Information Base monitor resides on the remote machine and checks it consistently and efficiently in a proactive approach The Information Base can e Allow for local checks on the agent platform of facilities such as NT log files CPU usage memory usage hard disk space processes and services e Monitor local applications acting upon Information Base rules to keep the application on track e Support a proactive approach in which you define the steps to be taken in order to prevent problematic situations automatically The predefined Information Base defines the statuses of the objects and the steps that should be taken in order to prevent problematic situations automatically For example IF CPU threshold is higher than 90 AND process MyServer has more than 75 open handles Action Restart service CheckHandles Every Action item that starts with IB will automatically sent the result after every cycle to the DES The result can be caught and handled by an Exception monitor with an Information Base IB element in the Interceptor Event24x7 User Manual Version 8 1 05 6 358 event 24x7 6 2 Components relations
306. re the files Note this whole screen becomes irrelevant if you haven t backed up your monitoring system at least once so remember to Take a backup before commiting a Restore Restore Event 4x7 Soliton Director csEvent ds Backup Backup Dates Explanation i 2013 10 26 121905 For choosing different 2013 10 26 122229 is directory specify the is aU 11 15 Thaboe directory s path and press the ie 01 4 02 26 232656 List Backup button ip 01 4 03 17 1255716 ip 2014 03 14 103726 ie 2014 04 09 112607 ip 01 4 05 10 010329 i 2014 05 21 143520 I Restore S Restore from W List Backup x Cancel 7 Event24x7 User Manual Version 8 1 05 8 573 event 24x7 8 4 Installing Pre Defined Solutions Event24x7 provides pre defined solutions for various systems and applications The Wizard guides you all the way to add a new monitored computer or add new solutions without any errors possible Wizard s first screen Wizard event 4xy Pre Defined Solitons Event24x7 Pre Defined Solutions Implementing the Event24oc Pre Defined Solutions is a simple process of three steps 1 Define a Session Session is foundation element of the Event 24x7 process Session represent computer that monitored by Event24c or gateway to application at other computers as in the case of databases that are access from local client on the define computer Session has to be defined once and from that moment event24c can mon
307. re are two tabs e Active for active workflows e History for historical workflows StartTime Y 05 20 2014 15 31 45 05 20 2014 15 50 47 05 20 2014 14 41 50 05 19 2014 21 56 16 05 19 2014 21 55 44 05 19 2014 21 53 12 05 19 2014 21 52 15 End Time 05 20 2014 15 31 45 05 20 2014 15 30 47 05 20 2014 14 41 50 05 19 2014 21 56 16 05 19 2014 21 55 44 05 19 2014 21 53 12 05 19 2014 21 52 15 Selecting one of the lines and clicking right click on the line will open this local menu Display Workflow Display Log Delete the Log The options are e Display Workflow Displays the workflow s route that was taken In green color Event24x7 User Manual Version 8 1 05 5 355 e Display Log Displays the log of activities of the workflow LE Worktiow History log WHMIS 1900525535 2216 b Hoo 4 Ba 05 19 2014 21 52 16 5000 Start Workflow Start 05 19 2014 21 52 16 5000 Start Workflow End 05 19 2014 21 52 16 10501 W MI2 Start 05 19 2014 21 52 16 10501 WHIZ Process Line 0 Cs 100293332992 2315131267072 05 19 2014 21 52 16 10501 WMI2Z Process Line 1 D 203102339072 21459765327608 05 19 2014 21 52 16 10501 WMI2Z Process Line 7 E 209800429568 2153706987S2 05 19 2014 21 52 16 10501 WHMIS Process Line 3 F 312433971200 353933762560 05 19 2014 21 52 16 10501 WHI End 05 19 2014 21 52 16 10207 LOOPI Start 05 19 2014 21 52 16 10207 LOOP P
308. rical value from an incoming event with some textual meaning defined in tables The table lookup mechanism uses two commands Table Lookup and Table Lookup Default Any other command is ignored For example if we receive a SNMP Trap that contains a numerical error value and we have to translate the value into string meaning in order to send it to another target Using the Table lookup is done by the Event24x7 function LOOKUP lt Template Table Name gt lt value gt Event24x7 User Manual Version 8 1 05 4 298 event 24x7 4 7 3 Mail Status Data Mail Status is a way to automatically get mails with the updated Parameter s status This part contains definition statements that defined the shape and the content of the mail There are five different line types you can use 1 Free text Can be combined with HTML tags for Example lt b gt Event24x7 lt b gt 2 Contain MAILPARAMETER lt session name gt lt parameter name gt The line will be replace by the value of the requested Parameter 3 Contain MAILMONITOR lt session name gt lt monitor name gt The line will replaced by all the Parameters of this Monitor 4 Contain MAILSESSION lt session name gt The line will replaced by all the Parameters of this Session 5 Contain MAILDES The line will replaced by all the Parameters of this DES 4 74 Printer Status Data Printer Status is a way to automatically get mails with the printer s counters There are five di
309. rigger Total Commander 7 5 I STADA ONEA PTA E Control Panel xt Services ty Event24x7 User Man Event24x Trial versi untitled Paint Event24x7 User Manual Version 8 1 05 9 609 event 24x7 A new window called Notification Status will be opened amp Motification Status Fort Status 6 Connected and Ready Select the DES that the modem is connected to and select operation For example in the picture above the selected DES is Local DES and the selected operation is Modem Status Now click on the Refresh button and the modem status will be displayed In the above picture connected and ready on port 6 If the modem status is different than Connected and Ready then it will not work properly In this case please check again that the modem is connected to windows according to the Connecting Wireless Modem paragraph on section 9 1 Modem Operations e Tickets Display alert sending status e Modems Status Display connected modems status e Modem Logs Display connected modems logs Event24x7 User Manual Version 8 1 05 9 610 vent 24x 9 2 Recipient Definition Define recipients to be notified in case of an alert wf e Recprent Denniton Group System Recipient Barry User Name Group First Hame Middle Mame Last Hame Address Address Enable i Disable Status if New F Delete E Apply Event24x7 User Manual Version 8 1 05 9 611
310. riority Purpose Define the MIB object Fields Name Object name OID Object Identifier Type The Object s type table If the object is a numeric value that represents an enumerated list of values define the possible value for this Object Details Define the MIB elements that exist in the MIB Event24x7 User Manual Version 8 1 05 4 316 event 24x7 4 9 3 Traps Trap Entry Humber Hame feisStatus Trap OID 1 3 6 1 4 1 19400 1 5 1 Set State OK Traps contents resourceM FEIS stateNameNFels Purpose Define MIB Traps Fields Number Trap number Name Trap name OID Trap Object Identifier Set State When using PRM SNMP Auto Creating set the state of this trap at the Dashboard Reset When using PRM SNMP Auto Creating specify which trap entry to set state Trap contents List of objects that are a part of the trap Details A MIB can have several traps Each trap consists of several Objects Event24x7 User Manual Version 8 1 05 4 317 eve 4 10 Service definition Define actions to be executed when the state of the service changes This is part of the Service Level Management of Event24x7 a Service Denna Group Example Service OnAgentless lia OnAgentless Description Pricarity Status Statistics Created Changed Spue Wwe i On gentless Example must be Service name Learning how to use a Rulle a Search 0 Enable i Disable Activate Hf Ne
311. rocess Count in loop o 05 19 2014 21 52 16 10207 LOOPI End 05 19 2014 21 52 16 10601 AssignEntryl Start 05 19 2014 21 52 16 10601 AssignEntryl1 Process Assign Entry 1002933329927 2151312767072 05 19 2014 21 52 16 10601 AssignEntryl End 05 19 2014 21 52 16 10602 SetFieldi Start 05 19 2014 21 52 16 10602 SetFieldl Process Set 46 62 05 19 2014 21 52 16 10602 SetFieldl End 05 19 2014 21 52 16 10301 Popupl Start ar am am A TA rn A ann m4 Th oe ee eee TT l F ai e Delete the Log Will delete this entry from the Workflow Status screen Event24x7 User Manual Version 8 1 05 5 356 event 24x7 6 Monitoring Definitions 6 1 General The Monitoring feature provides three approach types Pro Active Exception and FileWatch To navigate between the three approach types click on each of the icons which appear on the bottom of the left side of the screen underneath the applicable tree view gt eo OY To select the Pro Active monitor click on the first left icon as highlighted here gt a 8 To select the Exception monitor click on the second icon as highlighted here Paak To select the File Watch monitor click on the third icon as highlighted here Fany To select the IB Session monitor click on the forth icon as highlighted here The Pro Active monitor is governed by three objects Monitor Collector and Parameter Its purpose is to anticipate problematic scenarios and try
312. rom there Computer Computer name when required remote value For local computer leave it blank 6 10 38 IB Process Event24x7 User Manual Version 8 1 05 6 505 event 24x7 IB Process Type Exist Purpose Check Existence Stop process or Create a new one Fields Name Process Name Expanding the combo box will bring the processes currently running on the desired RES Choose one of them Type Type of activity Exist Terminate Create 6 10 39 IB Resources Event24x7 User Manual Version 8 1 05 6 506 event 24x7 IB RESOURCE Type CPU Name Oooo For a specitic process specify the process name without the extension For example taskmgr and not taskmar ese Purpose Check various NT resources Fields Name Resource name If remains Empty return the Total value for the entire computer Type Chose type from a list CPU Memory Handles Threads Count Details Retrieve resources via performance Monitor 6 10 40 IB Service Event24x7 User Manual Version 8 1 05 6 507 event 24x7 IB Service Hame Eventede fees Type Purpose Handle Service activity Fields Name Service name Opening the combo box will bring the services currently running Choose one of them Type Chose type from list Start Stop Status Restart Event24x7 User Manual Version 8 1 05 6 508 event 24x7 6 10 41 IF IF THEM Condition pO Purpose Open an IF THEN clause Fields Condit
313. rpose Perform a WMI command on the local RES Fields Command The command to perform Identify Identify string to intercept the result at the Exception pane Event24x7 User Manual Version 8 1 05 4 293 event 24x7 4 6 24 Directory Watch Director Watch Directory Contains po Prete pO C ubtree Watch directory tree Type Estensioni Ooo dents Filter File Hame Attribute Last Access Dir Name Size Last Write Creation Security Purpose Directory Watch Dog Fields Directory Directory full path Prefix File s prefix name Contains Subtree Type Extension Identify Filter Event24x7 User Manual Version 8 1 05 Report on files for which this Prefix is part of their name This is an optional field Watch recursively on sub trees when set Type of Action Start or Stop Directory Watch Dog for this Directory File Extension Report on files with this extension only Identify a string that will be sent to the Focal Point whenever a directory change is encountered Specify the attributes for the monitored files in the directory 4 294 event 24x7 4 6 25 File Handle File Handle Name Le Files M uF ile bat Type Copy To C Backup hyFile tet Purpose Ability to Copy or Delete files on agent less sessions Fields Name Source file full path Copy To Target path in case of Copy Operation Type File operation to Handle Delete Copy Details The File Handle provid
314. rpose Send a command to a monitored session Fields Command The command to send Session The session to send the command to Choose a session from the session list The first entry on the session list is Current Session It sends the command to the same session that is the source of the event triggering this rule Details Send command to the target session Event24x7 User Manual Version 8 1 05 4 191 event 24x7 4 3 12 Command DOS COMMAND for DOS Purpose Issue a DOS command on the monitored session Fields Command for The command to send DOS Details Issue a DOS command on the target session Event24x7 User Manual Version 8 1 05 4 192 event 24x7 4 3 13 Command PsExec Command by FE sec Mee L User Password Command Print command to DES log file Purpose Send a PsExec command to a monitored session Fields Type Type Options are External with d default External without parameters Internal User User name to be used for the command Password Password to be used for the command Command The command to send Details Send PsExec command to the target session Event24x7 User Manual Version 8 1 05 4 193 event 24x7 4 3 14 Command Special LOUMMAND Special Command ENTER Session AGENT Purpose Send a special command to a monitored session Fields Command Choose a command to send from these available options ENTER TAB RESET HOME NEWLINE Blank BREAK EOF and a
315. rsion 8 1 05 6 466 event 24x7 Provide a list of available charts Select the chart you want to display the parameter on Event24x7 will convert the Parameter s value into a chart 6 9 6 1 Display Type 6 9 6 2 Chart Statements _ 2 Action A ACOOn SEVE create state ALL Text me Operation Details yi ALL Text CPU l Tert Font Font size Font color Alignment Angle Vertical Gives you the ability to add specific labels and formatting options to the chart Event24x7 User Manual Version 8 1 05 6 467 event 24x7 6 9 Action Tabs Immediately Groupset Staging Area E K Notification Center DISPLAY Operation Details revise nS Ee Display CPU extends th T DISPLAY CPU extends the normal aed extends the norma Notification Operators Color Message c ha Text Geer Background Suppress original message There is an Action tab for each state The Action tab behaves the same as the Action Rule tab Only a single Action tab is executed at any cycle according to the Parameter s state If the Parameter s state was not changed the related Action will not be executed unless the PRM Force Action statement appeared in the State tab Event24x7 let you control when the Action Commands executed Immediately As soon as the state changed or by passing Force Action command Groupset Actions in the Groupset will be executed immediately and will affec
316. rt You can instruct Event24x7 not to delete the alert but change it s status to Closed Number of alert history appearances to be saved for each alert Setting the number to 0 means that no history will be saved This is for performance consideration Rule Status dialog has a Count column that counts how many times the rule was executed This parameter forces Event24x7 to update the count interactively when the Rule Status Dialog is open Every time the Rule Status dialog opens it displays the accurate Count field When this value is set to No the count field will not be updated automatically 3 98 event 24x7 Names The current states of Event24x7 are Ok Warning Error and Severe If you want to change these state names to other names like Severe to Fatal you can do it here Once changed you will receive notifications from Event24x7 Alert System with the new names 3 8 2 Security Tab The Security Tab forces the user to setup a new password according to the rules defined by Event24x7 which are similar to Windows 4 sepur RUS Minimum password length Contains Alpha charachters Contains Non Alpha charachters Contains Numeric charachters Password Expireation days False False False Minimum password length Contains Alpha characters Contains Non Alpha characters Contains Numeric characters Password Expiration days Set the minimum password length True value forces the pa
317. rt Event24x7 Database Insert Eyent dey proactive x Use Parameter default values Session name Monitor name Parameter name Value Hame State User User Users Purpose Fields Insert Event24x7 parameter s values and results in the database Use Parameter default value Session Name Monitor Name and Parameter Value and Name State User1 User2 and User3 Event24x7 User Manual Version 8 1 05 A checkbox indicating for Event24x7 which parameter s values will be inserted in the database the current one or any other parameter that exists in the monitoring solution If ticked take current parameter Only relevant if the above checkbox is not ticked You select the exact location of the parameter you wish to refer to Name of the variable to be inserted in the parameter and the desired value Default state of selected parameter User variables to be used by the parameter optional for it s checks 6 493 event 24x7 6 10 23 Database Reset The command has no dialog Purpose Reset the database used Fields None Details If for any reason the database Event24x7 is logged into in a specific session is stuck with this command it could be reset automatically Event24x7 User Manual Version 8 1 05 6 494 event 24x7 6 10 24 Display DISPLAY Display Parameter state is HPAMSTATE Color Message C O Background Suppress orginal message Purpose
318. rtical E Space Down 8 Nudge Right ih Rotate Right S Align Right allt Align Botto eB Same Size Hl Nudge Top Order to Flip Align Same Size Center Space Evenly Nudge HSA nco t aARFr t 64 4 ibe Cy ii li e lelo MEA Oe Edit Control a x IF ee E Simple Shapes x Og eaa till ax Pointed Page 0 27 RBOOLAASHMGVETLIGeAHRNFTeteuUsaaeaoefead amp TriggerPlus Software Ready E e S E NUM The added menu contains several useful options Page Setup command lets you control the size of the canvas Form Setting lets you control the background color and effects of the canvas Event24x7 User Manual Version 8 1 05 7 560 event 24x 7 1 2 Link between shape and computer You have to link a shape with a Session or Services defined for Event24x7 When linking is done Event24x7 will automatically update the shape at runtime with the computer current status 7 1 2 1 Link shape to a Session Select a shape that you want to link to a session At the right windows side there is Session bar Put the mouse over it and a sessions list window will be opened 3 C Event24x7 Trial version days left 172 Diagram from NetworkMedium sdn Ceo s View 1 Management Configuration Definitions Operation Help Terminai amp x e Sta ar Novice User Default Cascade Windows O Full Screen Blue Silver bey Bar Expert User Finesse Tile Windows Save Positio
319. rts whether the installation was successful or a failure Event24x7 User Manual Version 8 1 05 8 593 event 24x7 8 5 3 Maintenance Automatically replace all RESs under certain DES with newer version r tw Mamtenance Upgrade RESs only DES Name LOCAL DES Method Internally via active DES Authorization Administrator for Target Credential Specify User Name Password 0 Take from Session Definition x Cancel Event24x7 User Manual Version 8 1 05 8 594 event 24x7 8 5 3 1 General tab Upgrade RESs only LOCAL DES Type DES Name Method Authorization Administrator for Target Credential Specify Take from Session Definition Type DES Name Authorization Specify User name Administrator for Target Password Take from Session Definition Authorization Same as Target Administrator for CES if required Specify User name Password Event24x7 User Manual Version 8 1 05 Internally via acte DES User Hame Password Select what to upgrade Available options Upgrade DES only Upgrade RESs only Upgrade DES and its RESs Select DES User name to be used on remote server Password to be used on remote server Take to user and password from the Session definition Use the same user and password as specified for the target User name to be used for CES Password to be used for CES 8 595 CVECNT24x7 8 5 3 2 Log tab The Log tab provides
320. ructure It contains the list of the all the defined parameters organized in groups A group is a logical unit sharing some common content for the parameter within it e Definitions tabs The parameter definition tabs are at the right side of the screen This section remains blank if you select a group from the parameter List but shows detail for a parameter Event24x7 User Manual Version 8 1 05 6 436 event 24x7 Parameter screen operation buttons DES DES Activate the selected parameter at the appropriate DES Server of the parameter s session Event24x7 activates the parameters automatically when the session becomes active When you change a parameter s definition and want the changes to become effective immediately the Activate buttons sends the newly defined parameter to the correct DES New tf New Add a new Parameter Opens the definition tabs for entering a new Parameter Delete TA Delete Delete the selected parameter Apply il Apply Save last changes in the file Event24x7 User Manual Version 8 1 05 6 437 event 24x7 6 9 1 General Tab FreeS pace4l Monitor Free Space oo for all drivers Descriptions Dashboard Parameter not updates Dashboard Icon 7 Change Statistics Created 2014 04 28 09 36 Changed 2014 04 3010 34 By evert ee O Name Unique identifier of a parameter Description User s description of the parameter This specifies the parameter target and any other information r
321. s Event24x7 User Manual Version 8 1 05 6 430 event 24x7 6 8 IBs Definition An IB object executes a single command or request at the monitored environment using an agent that is install there The result of the request are sent back to the DES and caught by an Interceptor Monitorng Detniion SPUB WUWO Z Jg PFa riweSpaceC FreeSpace4ll HttpGet HttpGetContent PerfMon PortScan Process Pricrity ResourcelPu Order Disable Service Group Description Uptime Statistics Created 2011707709 18 49 Changed 2011 07 09 18 49 By FROM SKELETON Activate if New i Delete taf Apply The highlighted icon Indicates IB Session IB Session Definition has two major advantages over simple IB Definition e tis ordered automatically when the Target session becomes active e Using Copy amp Paste to copy definition to another session The Information Base screen has two parts Information Base List The IBs List located at the left pane of the screen and displayed in a tree structure Event24x7 User Manual Version 8 1 05 6 431 event 24x7 The Information Base definition tabs at the right side of the screen IB screen operation buttons Activate Activate Activate the selected IB Defined IBs are not executed until they are Activated The activate process reads the IB from a file and sends it to the appropriate Smart Agent located at the probed machine New E New Add a new IB Opens the definit
322. s Minimum Maximum and Average on the fly Fields Operation One of the following Set Value Increase Decrease Get Value Total Min Max Average Table Name Array name Index Array entry from 0 to 999 Expression Option to calculate the array entry on the fly Value Value Details This feature helps you maintain counters Event24x7 User Manual Version 8 1 05 4 256 event 24x7 4 3 74 TCPIP TCPIP Message HostName o 0 0 0 0 Address Fort O UDF Type ia TLP Purpose Send TCPIP packet Fields Message Message to send Host Name DNS name of target location Address IP address of target location Port Port number Type Protocol type UDP User Datagram Protocol UDP TCP Transmission Control Protocol TCP Details The UDP connectionless datagram delivery service 1s unreliable because it does not guarantee data packet delivery and no notification is sent if a packet is not delivered Also UDP does not guarantee that packets are delivered in the same order in which they were sent TCP is the default Event24x7 User Manual Version 8 1 05 4 257 event 24x7 4 3 5 Terms TERMS D ate i Add Acton pe Delete scope Universal Server Purpose Add or Remove a Term Fields Name Term Name Date Term Date 1s in the format of MM DD This is an optional field and if it is not present it is treated as dateless Action Type of action Add Add Term Delete
323. s Name Process Name Expanding the combo box will bring the processes currently running on the desired RES Choose one of them Type Type of activity Exist Terminate Create Event24x7 User Manual Version 8 1 05 4 288 event 24x7 4 6 19 IB Resources IB RESOURCE Type CPU k Name Loo For a specific process specify the process name without the extension For example taskmngr and not taskrngr exe Purpose Check various NT resources Fields Name Resource name If remains Empty return the Total value for the entire computer Type Chose type from a list CPU Memory Handles Threads Count Details Retrieve resources via performance Monitor Event24x7 User Manual Version 8 1 05 4 289 event 24x7 4 6 20 IB Service IB Service Hame Type Purpose Handle Service activity Fields Name Service name Opening the combo box will bring the services currently running Choose one of them Type Chose type from list Start Stop Status Restart Event24x7 User Manual Version 8 1 05 4 290 event 24x7 4 6 21 IB User Folder Watch IE User Folder s Files Watch Mame Contains Prefix Select extension Position Start OF file Method File Watch 0 Send to CES Dont Send to CES 0 Send to CES Flle Watch Purpose Perform User Folder s Files Watch Send new file records to Rule system and Focal Point Fields Name Prefix Contains Extension
324. s Perform ICMP checks for this address If there 1s a connection to the checked address e RC variable returns 1 e Message is written to the Event24x7 Log file containing the Hop Count The message has severity of ERROR If there is no connection to the checked address e RC variable returns 0 e Message is written to the Event24x7 Log file specifying the failure of the Ping command Example PING myserver IF RC 0 THEN DISPLAY Not Exist THE END Event24x7 User Manual Version 8 1 05 4 231 event 24x7 4 3 50 Play File Play File Full path of file name po Server All Events tudio Purpose Play audio file to take the operator attention Fields Full file name to play Server On what server to play the specified audio file Options are All EventStudio Current Server CES Server LOCAL DES and REMOTE DES Details Event24x7 will start the suitable program according to the file extension Event24x7 User Manual Version 8 1 05 4 232 event 24x7 4 3 51 Popup Popup oe s00 ShowD elay S000 mz Theme Office 2003 FPopupT heme Transparent l O 255 Message Purpose Popup a window message on the Studio This is one of the notification options available Fields Animation Control how the popup window appears Animation Delay Show Delay Theme Type of popup window Transparent Transparency of the popup Message The main message to display Details This is similar to exchange popup
325. s on the shape Event24x7 User Manual Version 8 1 05 7 563 event 24x7 7 2 Diagram Runtime At the Diagram Runtime mode Event24x7 uses a defined diagram to reflect the session situation and statuses 7 2 1 Selecting a Runtime Diagram At the Operation Menu there are three Run Diagram entries At the right side of each one of them there is an arrow Selecting the arrow a popup menu will be opened mics ye p y g IG 32 Event24x7 Trial version days left 172 Diagram from NetworkMedium sdn Diagram Tools B esm View Management Configuration Definitions Operation Help Design Layout Terminally Q EX Run Diagram 1 io Management Console 1O D S ES Session E Terms fS Monitor Database Alerts This is Q Worki ng Di D I Open Problems E Rule zE Variables B Collector z Notification F Workflow Hours eports System 5 Select diagram 3 ictY Dashboard j IB D EventVoice Parameter f Staging Area List Management Diagrams Reports Operator Control Center Status Working It gives you the opportunity to assign a defined diagram with the entry Once assigned pressing the Run Diagram button the diagram will be opened in runtime mode Event24x7 User Manual Version 8 1 05 7 564 Vent 24x7 7 2 2 Using Runtime Diagram a Diagram trom Gouner sun peL RAELE PE gt Customer gt 1000 iS import Fie Opening Agency Wa check Transactions to O
326. s sensitive to upper case or lower case letters Search only logs of this type for the above string Possible types are None Don t Check Error Warning Information Failure and Success Search for a specific Source from the header Search for a specific Category Search for a specific User name Search for a specific Event ID You can specify up to two Event IDs in a single request 6 417 event 24x7 6 6 4 2 Identify IDENTIFY Attribute Ary Purpose Perform action based upon the Message ID part of the incoming message Fields Identify Message ID of the message Field is in Alphanumeric format Wildcard and can be used Attribute Attribute of the message Available options Any Normal High Intensity Details Identify enables an Interceptor to be triggered by specific messages based on their Message ID Message ID is valid only when the target session has a Message ID For example MVS AS400 Example Identify IEF Every message id that has an IEF prefix Event24x7 User Manual Version 8 1 05 6 418 event 24x7 6 6 4 3 Information Base IB For each type of Information Base the information base Interceptor intercepts a specific value when this Information Base is being checked Thus in order for the interceptor to do this this Information Base has to be defined in The IBs definitions under the same session The following IB Types are available requiring you to fill in for each type th
327. s to keep for this parameter It is used by the Dashboard to display historic values of the parameter The value has two options e Count number of occurrences e Occurrences per Minutes Do we have a certain line to start taking the values from The default NONE is from the first line It can be based upon line number or String that appears in the line Do we have a certain line from which we stop taking the values from The default NONE is from the end of the intermediate file It can be based upon a line number or String that appears in a line For Single Field only Define the pattern of the intermediate file for extracting the new parameter value Possible patterns Fix Position The value has a fixed position Prefix by string The value is prefixed by a string For example Size 55 First field on The value is the first field in the line line Last field on The value is the last field in the line line True if criteria Set Value 1 if criteria is met and value 0 is true if not Usually it is used when the parameter is not a numeric value For example check if a service is running Result File In cases that a valid result is when the Existence collector didn t create an intermediate file The result 1s according to the Handling Existence pattern For Multiple Fields only You have to map the fields expected to be at any line This is a table with the field names Two field names have a special meaning Value The value of the par
328. sed the Service state to change Fields Parameter Parameter name that caused the state change Relation Equal or Not Equal the Monitor name Event24x7 User Manual Version 8 1 05 4 323 event 24x7 4 10 2 3 Session Session Session Relation Equal The Session that caused curent skate AND Purpose Perform action based upon the Session that caused the Service state to change Fields Session Session name that causes the state change Relation Equal or Not Equal the Monitor name Event24x7 User Manual Version 8 1 05 4 324 event 24x7 4 10 2 4 Service Service Always executed when this Semice state changed NOT Purpose Perform action when the Service state changed Event24x7 User Manual Version 8 1 05 4 325 event 24x7 4 10 3 Dependent Define the pre requisite conditions for execution of this Rule service X OP Parameter Parameter Operation Details l e Seon State Ok If conditions defined have failed to exist the Rule will not execute at this cycle 4 10 4 Action tabs The action tabs are similar to the Rule and Parameter Action tabs Please note that the Rule Service Action tabs are executed at the CES server Event24x7 User Manual Version 8 1 05 4 326 5 Operations The Operations chapter covers the screens that operate Event24x7 5 1 Reports Pre defined reports that display the result as a web page Available reports Open Problems
329. ses items found at the Operations part of the Studio menu including DES Session Rules Variables Terms and Voice Permissions may be None View only or All permission to view and modify Event24x7 User Manual Version 8 1 05 3 89 vent 24x7 3 4 6 Management Tab None View All All Management tab is used to define security levels for the Management activities of Event24x7 Permissions may be None View only or All permission to view and modify Event24x7 User Manual Version 8 1 05 3 90 event 24x7 3 4 7 Control Center Tab System Management 0 None view 0 All Database Management 0 None view 0 All File Watch Control d None View All Control Center tab is used to define security levels for the Control Center activities of Event24x7 Permissions may be None View only or All permission to view and modify Event24x7 User Manual Version 8 1 05 3 91 event 24x7 3 4 8 Features Tab Downtime Definition Notification Group Skeleton Names i Mone 0 None 0 None View O View All All Downtime Tables Notification Recipient d None d None View View 0 All All Downtime tab is used to define security levels for the Downtime activities and the Notification Group and Notification Recipient activities of Event24x7 Permissions may be None View only or All permission to view and modify Event24x7 User Manual Version 8 1 05 3 92 event
330. sing Event24x7 system variable TIME Note The DISPLAY command can also be added in the Monitoring Definition Parameter s State Tab with the same effect Event24x7 User Manual Version 8 1 05 4 201 event 24x7 4 3 22 ELSE Purpose Fields Details Add an ELSE clause to the IF THEN clause None Two lines are added to the actions command ELSE ELSE END You can add action statements between the above lines and these statements will execute only when the IF terms has failed Note The ELSE command can also be added in the Monitoring Definition Parameter s State Tab with the same effect 4 3 23 ELSE Object Purpose Fields Details Add an ELSE Object clause to the IF Object clause None Two lines are added to the actions command ELSE Object ELSE END Object You can add action statements between the above lines and these statements will execute only when the IF terms has failed Event24x7 User Manual Version 8 1 05 4 202 event 24x7 4 3 24 ELSE Parser Purpose Add an ELSE Parser clause to the IF THEN Parser clause Fields None Details Two lines are added to the actions command ELSE Parser ELSE END You can add action statements between the above lines and these statements will execute only when the IF Parser terms have failed Note The ELSE Parser command can also be added in the Monitoring Definition Parameter s State Tab with the same effect 4 3 25 Exit Rule Purpose Stop
331. sion OP Condition a Condition Operation Details DP Condition 2RING gt 1 2PING gt 1 If there are conditions defined the session will be Active only when all the defined conditions are met A session that failed in one of these conditions will be in the Waiting status Event24x7 User Manual Version 8 1 05 3 68 event 24x7 3 1 3 6 User Tab User Parameters Parameter Parameter Parameters Parameter User Parameters Allowing you to define global parameters for general purposes You can refer to those parameters as 4 SESSIONUSR1 4 SESSIONUSR2 4 SESSIONUSR3 and SESSIONUSR4 accordingly You can use these parameters in the Parameter Definition that belongs to the session Server Allowing you to define Role and Owner fields that could be used for notification purposes Event24x7 User Manual Version 8 1 05 3 69 event 24x7 3 1 3 7 Skeleton Tab 1 General 4 Informing Monitor Password SELCOMMUNIT SELOI SELO SELOS SELO4 SELO5 SELOB SELO SELOE SELOG SELIO SEL11 SKL12 Monitor Password Session variable that can hold a password for use when rebuilding skeleton SKLCOMMUNITY Session variable that can hold a community value for use when rebuilding skeleton SKLO1I SKL12 Session variables that can hold any value desired by the user for use when rebuilding skeleton Event24x7 User Manual Version 8 1 05 3 70 event 24x7 3 1 3 8 Prop
332. sion 8 1 05 3 78 event 24x7 3 2 2 Sessions Tab Add sessions to the service Sessions List GMAIL LIND MODEM FEMOTEUNTs SNMF TCFIF UNIS UserE xpenence All Sessions Choose sessions manually Selected Sessions AGENT AGENTLESS Set this field to include all defined sessions in the Service Select desired sessions from the Sessions List and move them to the Selected Sessions list The action is done with the direction arrows gt gt gt and lt lt lt buttons You can select multiple sessions in each transfer Event24x7 User Manual Version 8 1 05 3 79 event 24x7 3 2 3 Services Tab Add services to the service Selected Services Services List RemoteLeaming Example Choose services Select desired services from the Services List and manually move them to the Selected Services list The action is done with the direction arrows gt gt gt and lt lt lt buttons You can select multiple services in each transfer Event24x7 User Manual Version 8 1 05 3 80 Vent 24x7 3 3 User Configuration Users Configuration defines the names and descriptions of users in the Event24x7 system Users connguraton ADMINISTRATOR even GUEST USER UserID ADMINISTRATOR Full Name Event24 7 MASTA USER This is Master User Remarks Status Enable d Digable Delete x Cancel The Users configuration screen left pane contains the defined user list The right pane o
333. sion 8 1 05 6 444 vent 24x7 6 9 4 State Tab The State Tab sets the new parameter s state It uses the same statements as the Action state with a special set of statements prefixed by PRM Parameter Threshold Differential Single Parameter 0 Group of Parameters Sort v List Sorted Operation Operation Details RESOURCE CPU PRM Value 9 V4LUE Compare Field Value PAM Thres Value gt Relation 0 Last Checks Duration o L Last Minutes Check Defined Threshold Compare Field Field from the Create Tab like Value Name or user defined Event24x7 User Manual Version 8 1 05 6 445 event 24x7 6 9 4 1 PRM Consecutive Parameter IF Consecutive Parameter Mame Field type Humber Relation Compare Walue Handle first value False Purpose Test current value of the parameter with its previous value Fields Parameter Name of the Parameter as defined in the Name Create tab Field Type The type of relation compared to the parameter Relation Choose one of lt lt gt gt Or Increase by Value Increase by Percentage Decrease by Value Decrease by Percentage Compare The Threshold value Value Handle first Control behavior of the first check when value there is no previous value for comparing Details Event24x7 User Manual Version 8 1 05 6 446 event 24x7 6 9 4 2 PRM Consecutive Groupset Parameter IF Consecutive Groups
334. solution for his environment It contains all the checks and activities that Event24x7 performs Manage by exception mode Rules Information Base User Experience Scripts Voice Mib Service File Watch and Exception Monitoring O O 0 O O Q 0 0 e Workflow e Pro Active Approach mode o Pro Active Monitoring Definition e Skeletons e Diagram o Diagram definition Diagram is the tool that lets you define the network graphically in a Visio style It has two parts Definition and Run time The Diagram is described in detail in a separate Chapter The definition options can be accessed from the Definition pull down menu on the Studio screen Event24x7 User Manual Version 8 1 05 4 109 event 24x7 4 1 Workflow Definition Event24x7 Workflow is a new and powerful module providing a simple way to monitor and manage complicated processes The new Event24x7 Workflow module integrates all of Event24x7 outstanding capabilities in an easy to use graphical interface Drag and Drop capabilities makes it is easy to design even the most complex scenarios Integrated with Event24x7 large number of actions this module becomes extremely powerful and effective Event24x7 Workflow can be used in order to monitor simple objects like processes or services on a given server or to execute a much more complicated scenario like an entire business process tailored specifically for your organization Event24x7 Trial vers
335. sor Connect CPUH 0 Manufacturer Genuinelntel Computer Processor Intel Family 6 Model 58 Stepping 93 Illl Refresh E wit Fill the computer address you want to manage User ID and password and type the C2 Refresh button The Hardware tab shows the hardware components of the tested computer It also shows information about the Processor BIOS Memory Disk Drives and the Video controller The Hardware tab displays only information Event24x7 User Manual Version 8 1 05 15 670 event 24x7 15 1 1 Services Tab Status Start Mode Account Name Name Sia Adobe Acrobat Update Service Running Auta LocalSystem AdoabedRh 4 Adobe Flash Player Update Service Stopped Manual LocalSystem AdobeF las Ss Application Expenence Running Manual localS stern AeLookup i Application Layer Gateway Service Stopped Manual NT AUTHORIT ALG Sa Application Host Helper Service Running Auto Locals ystem 4ppHostss Ss Application Identity Stopped Manual NT Authority Lo ApplDSwc Application Mformatior Stopped Manual LocalSystem Appinto iy Apple Mobile Device Running Auta LocalSystem Apple Mob Ss Application Management Stopped Manual LocalSystem Apph gmt ty ASP NET State Service Stopped Manual NT AUTHORIT aspret sta Bey windows Audio Endpoint Builder Running Auto Locals ystem AudioE ndp Bey Windows Audio Running Auto NT AUTHORIT 9 Audiosry Sy AVGIDSAgent Aunning Auto LocalSystem AVGIDSAc ity ANG WatchD og Aun
336. ss for sending the trap and as a result it will be done asynchronously 6 548 event 24x7 6 10 76 SNMP Send Trap SNMF Trap Message Target i Fort 152 Mode v Execute Asynichrony Purpose Send SNMP Trap message Fields Message Message to send Target IP address of the target Port Port number Mode By default sending of an SNMP message is done synchronously by Event24x7 Checking the Mode field will cause Event24x7 to open a new process for sending the message and as a result it will be done asynchronously Details Send SNMP message The SNMP well known port is 162 You can override the Port by a different one Event24x7 User Manual Version 8 1 05 6 549 event 24x7 Table Talk Operation Set Value Table Hame Index Number o From O to 999 O Expression sd Purpose Lets you manage dynamic arrays in the memory directly from the Action Or State tabs You can store values perform adding and subtraction get Totals Minimum Maximum and Average on the fly Fields Operation One of the following Set Value Increase Decrease Get Value Total Min Max Average Table Name Array name Index Array entry from 0 to 999 Expression Option to calculate the array entry on the fly Value Value Details This feature helps you maintain counters Event24x7 User Manual Version 8 1 05 6 550 event 24x7 6 10 78 TCPIP TCPIP Message Host Hame Address Port Type
337. ss specify the process name without the extension For example taskimgr and not taskmgr ese Session SGENTLESS Purpose Check various NT resources on a selected session Fields Name Resource name If remains Empty return the Total value for the entire computer Type Chose type from a list CPU Memory Handles Threads Count Session Session upon which you desire to check the different resources Details Retrieve resources via performance Monitor Event24x7 User Manual Version 8 1 05 4 213 event 24x7 4 3 36 IB Service IB Service Hame Session AGENT Purpose Handle Service activity on desired session Fields Name Service name Opening the combo box will bring the services currently running on the desired session Choose one of them Type Chose type from a list Start Stop Status Restart Session Session upon which you desire to perform the service type operation specified above Event24x7 User Manual Version 8 1 05 4 214 event 24x7 4 3 37 IF IF THEM Condition pO Purpose Open an IF THEN clause Fields Condition Specify expression If the expression is TRUE the statements in the THEN group are executed If the expression is FALSE the statements are not executed unless there is an ELSE clause upon which the statements of the ELSE clause will be executed Details Add the following three lines to the actions command IF expression THEN THEN END You can add ac
338. ss than currently exist one with the same Key it will be deleted without executing its Action Tab Staging Area keeps the Parameter with the highest priority at the Staging Area Time Wait Time in Minutes to wait till Staging Area start to verify the ancestors state Ancestors Ancestors of the current parameter Event24x7 User Manual Version 8 1 05 6 465 event 24x7 6 9 6 Display Tab This tab defines the default display option of the parameter which is displayed at the Dashboard when the mouse is left button double clicked Simple Bar Chart Multi Color Bar Chart Weekly Server Load Soft Bar Shading Glass Bar Shading Gradient Bar Shading aaa Bar 5 oar Cylinder Bar Shape Polygon Bar Shapes Stacked Bar Chart Percentage Bar Chart Maulti B ar Chart Soft Multi B ar Chart Glass Mult B ar Chart Gradient Mult B ar Chart Multi Cylnder Chart Mult Shape Bar Chart Overlapping Bar Chart Requested columns Tue Wed Thu Fri for Line chart Work Week 25 Compress the data Two more fields have been added to the above screen Requested columns for Line chart Maximum number of records to base the displayed chart upon only if you select a chart of this type Compress the data A checkbox enabling the option to transfer the saved data from the CES folder to the EventStudio folder on compressed files If ticked then compress This enables us to transfer more data when necessary Event24x7 User Manual Ve
339. ssword Domain Restore Proxy Server Event24x7 User Manual Version 8 1 05 Name and path of the program Run time parameters for the program Directory path User name Password Network Domain name Option to restore the User profile Use Event24x7 Gateway for starting program Event24x7 server upon which to start the program This is transparent to the program execution within its own servers 6 530 event 24x7 6 10 59 Remove Rule REMOVE RULE Server FES SERVER Purpose Remove single Rule or Group of Rules from the Rule System Fields Group Rule Group s name Rule Rule name If the Rule name s field remains empty the action removes the entire Group Server The Event24x7 s server from which to remove the rule Details Remove the rule or the entire Group from the Rules Active list This will prevent the removed rules from being triggered The Remove statement has the same effect as performing the Remove command from the Rule Status screen Event24x7 User Manual Version 8 1 05 6 531 event 24x7 6 10 60 Report Report Report Open Froblems All bi Ferom Create at CES Don t send to open Studio Purpose Write a dynamic report of open problems so one can go over it later Fields Report Perform Event24x7 User Manual Version 8 1 05 What to report two available options Open Problems By Sessions All the sessions listed one by one with a sub list of all th
340. ssword to contain at least one single Alpha character True value forces the password to contain at least one single Non Alpha character True value force the password to contains at least one single Numeric character Numeric characters are 1234567890 When the password expires the user will be forced to change it Event24x7 User Manual Version 8 1 05 3 99 event 24x7 3 8 3 Database Tab The Database Tab forces the user to setup the database authentication parameters needed to login to the database 4 Database properties ODBC DSN User Name Password Connection String Used Database Date Type MSOL BEM ME St MS SOL Getdate ODBC DSN User Name Password Connection String Used Database Date Type Use as a connection to ODBC definition For authentication when logging into the database Use this field for dynamic connection Specify the connection string you want Event24x7 to use Specify the name if USE command needs to be done before opening the table The first field in the table is the Date field Every database system has a different built in function to create this value Specify which one you use Event24x7 User Manual Version 8 1 05 3 100 event 24x7 3 8 4 Mail Tab Sending email is one of the Rules activities in the Action option A Pal Enable Server Name Password Authentication Sender Server SMTP port Fo SSO y Fidi m pop gmail com event triggerplus
341. t As a result the status changed to Noticed New lines were added to the watched file and the file was not noticed 15 4 2 Opening the file viewer File viewer might be opened by two options e Manually Double click on a file entry from the file list e Automatically The file viewer opens automatically for a file with the Open Viewer Automatically option when a new record was added Setting this option is done from the User Log Watch request or dynamically by the Set Popup button from the FileWatch Control windows Event24x7 User Manual Version 8 1 05 15 686 event 24x7 When opened it might look like the following window ae View Ale AGENT test ilelog File viewer has several uses It is used to display log files The log itself may reside on a remote computer It can be displayed on any computer that has EventStudio No need to make the file shared It is used to monitor important changes in the log file The user can define a rule to color certain lines with different colors so they will be highlighted In the above example lines that contain the string failed will have a red background color while lines with the string successfully will have a Green background color Event24x7 User Manual Version 8 1 05 15 687 event 24x7 15 4 3 1 File Viewer setup leviewer setup Behavior l Ensures visible of last added line Default Color Font Back id Text F Change Viewer Fort Rulers Rulers
342. t MIB Ident Trap number Value Execute synchrony Purpose Send SNMP Trap according to Mib Fields Target IP address of the target Port Port number Mib Identify Mib name taken from Mib Definition screen Trap Number Value Values of the trap according to the mib Values should be separated by commas Mode By default sending of SNMP is done Details Event24x7 User Manual Version 8 1 05 synchronously by Event24x7 one by one Checking the Mode field will cause Event24x7 to open a new process for sending the trap and as a result will be done asynchronously 4 254 event 24x7 4 3 72 SNMP Send Trap SNMF Trap Message Target 0 Fort Tbe Mode v Execute Asynichrony Purpose Send SNMP Trap message Fields Message Message to send Target IP address of the target Port Port number Mode By default sending of an SNMP message is done synchronously by Event24x7 Checking the Mode field will cause Event24x7 to open a new process for sending the message and as a result it will be done asynchronously Details Send SNMP message The SNMP well known port is 162 You can override the Port by a different one Event24x7 User Manual Version 8 1 05 4 255 event 24x7 Table Talk Index Number o From 0 to 999 O Expression o Purpose Let s you manage dynamic arrays in the memory directly from the Action Or State tabs You can store values perform adding and subtraction get Total
343. t all of the parameter s results that have the highest severity state For example if we are checking the Free Space of all the drives on a computer and 2 of the drives got Error state then any action written in the Groupset actions in the Action Error tab will be applied to both drives for instance 2 emails will be sent One for each drive Staging Area Deferred The Action sent to Staging Area to verify the state this parameter s ancestors This will prevent White Noises meaning sending wrong action commands It is possible to combine the two methods and use both of them simultaneously A Pull down menu shows a list of activities that can be executed under each of the Action Tabs Many of these activities are identical to the Rule s Definition activities Activate IB Activate Information Base at a remote session Activate Rule Activate a rule or group at Event24x7 s server Event24x7 User Manual Version 8 1 05 6 468 Activate Workflow Alert Backup Beep Case Change Collector Interval Charts Check Thresholds Clear Text Command Command DOS Command PsExec Command Special CTM Condition CTM Jobs CTM Load set CTM Resource CTM Shout Database Command Database Command Free Database Insert Event 24x7 Database Reset Display Else Else Object Else Parser Exchange Move Exit Rule File Copy to Server File Handle HTTP IB Application Pool IB Boot IB Command IB Disk Space IB Memory Even
344. t it doesn t need internet to send the SMS It is based upon a cellular modem that is connected to Event24x7 via a serial connection You have first to define the Serial session in Event24x7 that connects to the cellular modem and then define the script that tells Event24x7 the AT commands required to handle the SMS Please look at the Siemens script that defines how to use a Siemens MC45 cellular modem Event24x7 User Manual Version 8 1 05 6 546 event 24x7 6 10 74 SNMP Mib Interactive SNMP Get Set Type Get Tage L Community Prot Leave empty for default a Purpose Get or Set SNMP mib object Fields Type Type of request Get or Set Target IP address of the target Community Port Port number Default port number is 162 OID Object Identifier of Get or Set Event24x7 User Manual Version 8 1 05 6 547 event 24x7 6 10 75 SNMP Mib Trap SNMF Trap according ta MIB Target Fort Leave empty for default MIB Identity Trap number Value Execute 4synchrony Purpose Send SNMP Trap according to Mib Fields Target IP address of the target Port Port number Mib Identify Mib name taken from Mib Definition screen Trap Number Value Values of the trap according to the mib Values should be separated by commas Mode By default sending of SNMP is done Event24x7 User Manual Version 8 1 05 synchronously by Event24x7 one by one Checking the Mode field will cause Event24x7 to open a new proce
345. t the Parameter s state It can be set it in advance to OK Warning Error or Severe It can also be set to Use Parameter State Tab and then the parameter itself will set the state according to the State Evaluation Can pass user arguments as input to the parameter It can be used at the Parameter s side as WORD 1 4WORD2 etc 4 147 event 24x7 4 1 4 13 2 Session Purpose Handle a Session Fields Session Session Name Type Action type Restart Stop Assure Active 4 1 4 13 3 Run Mail Status Select report script from the MailStatus group in Templates Definition Select the DES target for the report Indicates the maximum number of hours passed since a parameter was last updated More than this will indicate a problem and will be shown in the report Purpose Run Mail Status report Fields Script DES Target Shout Hours Filter Event24x7 User Manual Version 8 1 05 Filter according to desired severity All Warning Only Warning and above Error Only Error and above Severe Only Severe and above Not Run 4 148 event 24x7 Mail To Mail address Mail List Indicates a mailing list Mail Server Mail server Event24x7 User Manual Version 8 1 05 4 149 event 24x7 4 1 4 13 4 Run Printer Status Purpose Run Printer Status report Fields Script Select report script from the PrinterStatus group in Templates Definition DES Target Select the DES target for the report Attache
346. t24x7 User Manual Version 8 1 05 event 24x7 Activate a Workflow Open a new Alert at the alert windows Automatic backup of the User configuration files Generate a Beep sound Add a CASE line to the SELECT statement Change the Time and Interval parameters of a Collector dynamically Create a chart for a Parameter Check values against thresholds Clears the text in current line Issue a command to the session Issue a DOS command Issue a PSExec command on remote computer Send special character keys to a session Enter Tab Reset home New line Handle CONTROL M conditions Orders or forces jobs from a Scheduling table load balancing algorithm for CONTROL M Performs operations on the Quantitative Resources table Sends a message to the specified user or destination Command to perform on the database Command to perform on any selected database Event24x7 parameter s value to insert in the database Reset the database server Display a message to the focal point Add an ELSE line to the IF THEN statement Add an ELSE Object line to the IF Object statement Part of the If Parser command the statements following the Else parser are performed when the IF parser conditions are not met Either Move or Copy messages from one mailbox account to another or Delete specified messages Stop the execution of the current rule Send file to EventStudio Copy one file to another or delete it Check availability o
347. t24x7 User Manual Version 8 1 05 12 656 13 Downtime Define Downtime for Sessions and Monitors for a period of time on which no collector will be active and no parameter will be performed The Downtime operation allows you to set in advance the date and time on which all monitoring for a specific session of even a specific monitor of a session will be disabled for a period of time It allows you to select the sessions and monitors that will be included in this downtime It can also send an automatic email on the start and end of downtime as well as an email for notification Sk 5 Sega La Downtime Definition Group DT Downtime Excp4 spuewwon oY x Description Order Disable Type Planned CO Unplanned Status Completed Time and Date start 230172011 j 00 11 End 2370172011 00 15 Statistics Created 2011701724 00 09 Changed 2011 01 23 18 53 By EVENT New E Delete Event24x7 User Manual Version 8 1 05 13 657 event 24x7 13 1 General Tab Description PG Order Disable Type 0 Planned C0 Unplanned Status Completed Time and Date Start 4401 42011 a oo End 23 01 2011 0015 Statistics Created 2011 01 24 00 09 Changed 2011701723 18 53 By EVENT Name Downtime unique identifier Group Group name of Downtimes Description Downtime description Order If checked disable this Downtime Type Select if Downtime is planned or unplanned Status Automatic s
348. t24x7 User Manual Version 8 1 05 3 63 event 24x7 In case of workgroup user the monitored computer name must be part of the user name smith administrator Password The User s password for Login Event24x7 User Manual Version 8 1 05 3 64 event 24x7 3 1 3 3 Advanced Tab Focal Point Message Color hl Default es ee Focal Point Source Color cow Text Session Default hi E Y Background Process on CES Group Messages No O Grouping Rule or lB at Startup Name LO Type Single Rule lB Entire Group Target Rule to be executed at LES For lB Session type spec Namne the session name Type Group for sending all B to startup Focal Point Message Defines the default color for the message part of the Color Focal Point screen All the messages coming from the sessions are displayed on the Focal Point screen A Focal Point message has three parts Source Time and Message Focal Point Source Defines the default color for the source part of the Focal Color Point Process on CES This radio button determines whether messages from this session will be sent by default to CES rule processing By default this value set to No Event24x7 rules can override this behavior and forward specific messages to the CES Event24x7 User Manual Version 8 1 05 3 65 event 24x7 Group Messages By default when the DES finishes evaluating the event which arrived from a session it is sent automatically to the CES for furt
349. tate 1t means that the problem is not at the tested Parameter but higher in the hierarchy Therefore the only action for the higher parameters will be executed Event24x7 User Manual Version 8 1 05 1 29 event 24x7 In order to explain the behavior of the Staging Area let s presume a two level connection We have a test for a service existence which depends on the availability of the network card The network card test was OK After 10 seconds the test of the service existence failed Everyone else will shout on Severe state at the service existence test In fact the problem did not occurred due to the service not running but it occurred because five seconds earlier the network itself had a malfunction Event24x7 has a unique Staging Area module to handle it On the first step the Staging Area will verify what the current status of the network test After finding out that the problem is at the network level it will eliminate the action items for the service existence test while leaving only the action items for the network card Event24x7 User Manual Version 8 1 05 1 30 event 24x7 2 Starting Event24x7 2 1 Login Dialog Start Event24x7 The Login screen will pop up Username Password CES Address 127 0 0 1 Port The Login Dialog is used to authenticate user to Event24x7 gt gt After installing Event24x7 the default user and password for login are User Name event Password event For better security please
350. tatus of Downtime field Time and Date Start Starting date and time of the Downtime Event24x7 User Manual Version 8 1 05 13 658 event 24x7 End Ending date and time of the Downtime Event24x7 User Manual Version 8 1 05 13 659 event 24x7 13 2 Details Tab Service ard Party Severity Environment Type All combo boxes on the Detail tab are taken from outside tables Entity Entries taken from the Entity tbl file Service Entries taken from the Service tbl file 3 4 Party Entries taken from the 3rdParty tbl file Severity Entries taken from the Severity tbl file Environment Entries taken from the Environment tbl file Type Entries taken from the Type tbl file Event24x7 User Manual Version 8 1 05 13 660 event 24x7 13 3 Impact Tab Recover All fields on the Impact tab are for free text entering Root Cause Free text Impact Free text Recover Free text Event24x7 User Manual Version 8 1 05 13 661 event 24x7 13 4 Monitors Tab From External List Script member Insert new lines Session Monitor AGENTLESS AGENT IBService Selecting the Sessions and Monitors to be included in this Downtime From External List If checked takes the Sessions and Monitors list from external file Session Monitor List A list of all the Sessions and Monitors to be included in this Downtime Event24x7 User Manual Version 8 1 05 13 662 event 24x7 13 5 Start Downtime Mail
351. te The baud rate for the modem s communication Data Bit Number of data bits 5 6 7 8 Stop Bit Number of stop bits 1 1 5 2 Parity Parity bit in use Even Odd None Flow Control Flow Control Hardware Software Event24x7 User Manual Version 8 1 05 3 46 event 24x7 3 1 3 Sessions Configuration 3 1 3 1 General Tab Session Name SGENTLESS Description System Skeletons Real Name Rule System Activate Rule System Enable O Disable Status Statistics Created 2014 04 28 09 36 Changed 2014 05 11 21 11 By EVENT Session Name Unique identifier of a session Description User s description of the session Skeletons List of the Skeletons used to build this Session Real Name Session real name as discovery by the Discovery process Rule System Specify whether this session is part of the Rule system Event24x7 User Manual Version 8 1 05 3 47 event 24x7 Usually every message coming from a session is checked against the active rules If rules are triggered due to the incoming message they are executed If you uncheck Activate Rule System messages coming to this session from the Rule system will be omitted Status Session status Enable instructs Event24x7 to establish communication with the session and get the messages from the session Disable instructs Event24x7 not to establish connection with this session Created Creation Date of the session Changed Date of last change By
352. ted traps will be taken from the Action Of the current parameter Event24x7 User Manual Version 8 1 05 6 458 event 24x7 6 9 4 12 PRM State Parameter Set State Purpose Set the Parameter s state as a result of the latest Collector s execution Fields Type Select the next state The possibilities OK Warning Error Severe PRECEDING Set the next state at a severity of one less than the current Example Set next state to Error if the current state is Severe OK state remains the same CURENT Leave the state as it is SUCCESSOR Set the next state at a severity of one higher than the current Example Set next state to Severe if the current state 1s Error Severe state remains the same Details Set the Parameter s state Event24x7 User Manual Version 8 1 05 6 459 event 24x7 Parameter Threshold Field Relation Check Defined Threshold Explanation using Field For temprary fields use 1fieldname For fields from Create tab 7PRMVALUE fieldname Purpose Set the Parameter s state according to the Parameter s threshold Fields Field The Parameter s field name that contain the value to be compare with the threshold The fields are created at the Create Tab Relation The mathematical relation Details This statement simplifies the use of a threshold Every Parameter might have a threshold In order to view or update the threshold press the Check Defined Threshold button
353. the right side of the screen Event24x7 User Manual Version 8 1 05 6 369 event 24x7 DES DES Activate the selected collector at the appropriate DES Server of the monitor s session Event24x7 activates the collectors automatically when a session becomes active When you change a collector s definition and want the changes to be effective immediately press this button and it will send the newly defined collector to the correct DES Collector screen operation buttons New if New Add a new Collector Opens the definition tabs for entering a new collector Delete ER Delete Delete the selected collector Apply il Apply Save last changes in a file Event24x7 User Manual Version 8 1 05 6 370 event 24x7 Check whether CPU is over 80 Descriptions during two consecutive minutes Enable Status L Disable Intermediate file ln Memory Performance v Delete file Statistics Created 201 4 04 28 09 36 Changed 2014 04 28 09 36 By FROM SKELETON Name Unique identifier of a collector Description User s description of the collector This specifies the collector target and any other information relating to the collector Used for documentation Status Enable or Disable the collector In Memory Specify whether the intermediate result file of the collector will be held in memory This increases performance by decreasing IO operations Event24x7 User Manual Version 8 1 05 6 371 event 24x7 Delete File S
354. then just type the OK button If you run the Client from different computer then type the computer name of the Server in the Server Name field and type the OK buttons Event24x7 User Manual Version 8 1 05 22 719 eCVeNT 24x7 If the Named Pipe connection was successfully established the Client and the Server would communicate by a series of Read and Write messages The operation will result in the following screens a Event24x7 TestPipe Options Messages Server Server Server Servers Servers Servere Server Server Server Servers Servers Servers Server Servers Ready Event24x7 User Manual Version 8 1 05 Ex wiew Help Test number 9 Test 9 Read bytes to read read 7 Test 9 Write bytes to write written Test number 9 Test 9 Read bytes to read 7566 read 7566 Test 9 Write bytes bo wrike 7566 written 7568 Test number 10 Test 10 Read bytes to read 7 read Test 10 Write bytes bo write writhen 7 Test number 10 Test 10 Read bytes to read 7566 read 7568 Test 10 Write bytes bo write 7568 written 7568 Ended Successfully Ended Successfully A similar screen would be seen at the Client side Any other results means that the Named pipe connection was not established 22 20 event 24x7 22 2 2 Test Voice Program 1 To start the voice test program run the program lt Event24x7 installation gt Tools Test TestVoice exe Where lt Event24x7 installation gt is the Event24x7
355. through 32 767 0x25 through 0x7FFF Duration Duration in milliseconds of the sound The Beep function generates simple tones on the speaker Event24x7 User Manual Version 8 1 05 4 141 4 1 4 10 6 Alert Purpose Fields Details event 24x7 Create a new Alert in the Event24x7 alert system Operation Message Severity Status Assign User Choose the operation Add Update two modes or options Changed only or Changed if Exist Add if not or Delete Alert message Choose severity type The Alert background displayed with the color according to the severity Warning Yellow Error Orange Severe Red Set the alert new status If the operation is Assigned then specify also the user name at the right field Event24x7 user name to assign Alert is Event24x7 s component which signals to the operator that a problem exists The Alert remains active until the problem has been resolved Note An Alert command can also be added in the Monitoring Definition Parameter s State Tab with the same effect The Alert is handled from the Alert Screen Event24x7 User Manual Version 8 1 05 4 142 4 1 4 11 Log 4 1 4 11 1 Append Line ann Purpose Fields Details event 24x7 Create and handle a user log file for debug or control purposes File Name Name of the log file Line Line to be added It can contain User or System variables Event24x7 will append a line to the specifi
356. tic login For example you might wish to search for a requested user name before entering the user name If text is found on the screen then RC is set to 1 If it isn t found RC is set to 0 Event24x7 User Manual Version 8 1 05 6 553 event 24x7 6 10 81 User Exit User Exit Purpose Execute a DLL or a specific DLL function at this point in the Action Tab The details of this DLL or DLL function name are specified one level up in the parameter s Collector in it s Execution Tab Fields Exit Number Acts as an identification number for the executing DLL Details Event24x7 User Manual Version 8 1 05 6 554 event 24x7 6 10 82 VOICE VOICE Request Type Serial wait till end YW ak Minutes for time out Purpose Send a Voice Request to the EventVoice for execution Fields Name Voice Definition script Type Tick this box if you wish to wait until the script file execution ends before continuing Otherwise the program will be executed in parallel to other operations Wait When executing in Serial mode allow time in minutes for program execution to end Details Voice request might have a Return Code Special system variable RC VOICE holds the return code Event24x7 User Manual Version 8 1 05 6 555 event 24x7 6 10 83 WHILE WHILE Purpose Open a WHILE clause Fields condition Specify expression If the expression is TRUE the statements in the WHILE group are executed
357. ting the Workflow Definition from the Definitions menu The opened window will look like this WOTKHOW iB gt RA a B We Ca DE a gt Run W Stop Verify F i 4 Files amp Folders Workflow Properties Pane Get File Query Get File Time Different Set File Action Get Folder Query File Excel Action 4 Services amp Processes Service Process Start Process As User 4 Execution DES Command Get CPU Performance Monitor Port Scan Http Command Command Special Server Command Command DOS 4 Windows WMI Query e The Workflow screen has three parts o Workflow Toolbox The Toolbox is located at the left pane of the screen and displayed in a tree structure It contains the list of all the predefined Workflow Activities organized by groups A group is a logical unit sharing some common content for the Workflow Activities within this unit o Workflow Definition The Workflow definition pane is at the center of the screen In this section the Workflow flowchart is created o Workflow Properties The Workflow properties pane is at the right of the screen This section is used for providing the specific properties for each one of the workflow activities Event24x7 User Manual Version 8 1 05 A 111 event 24x7 o Workflow screen operation buttons E a3 e BA i foc Al Run M Stop verify E New Open Save Save As Cut Copy Paste Undo Redo Delete Fit to Window Run Stop Verify Setup Y7x
358. tion statements between the THEN and THEN END lines and they will be executed only when the IF expression is TRUE Event24x7 User Manual Version 8 1 05 4 215 event 24x7 Operators Addition Subtraction and unary minus Multiplication Division m Power Modulo amp Logical AND Logical OR Logical NOT gt gt Greater or equal lt lt Smaller or equal Not equal Equal abs fact rand acos floor rand min max asin hex round atan if sin avg x y Z isNaN sinh bin log sqrt ceil log10 sum x y Z COS max X y Z tan cosh min x y Z tanh Event24x7 User Manual Version 8 1 05 4 216 event 24x7 4 3 38 IF Object IF Object Exist Type Service Proceed TRUE If Object Exist O FALSE If Object Exist Purpose Open an IF Object clause Fields Type Service or Process Name Object s name Session Session s name Proceed Select True if object exists or False if object exists Details Add the following three lines to the actions command IF Object expression THEN Object THEN END Object You can add action statements between the THEN Object and THEN END Object lines and they will be executed only when the IF expression is TRUE Event24x7 User Manual Version 8 1 05 4 217 event 24x7 4 3 39 IF Parser IF THEN Parser Variables sn Value E spressioni po Purpose Open an IF THEN Parser clause This IF clause is semi compiled for per
359. to IF error goto event 24x7 ra bes BUSY BUSY ERROR Purpose Dial a number Fields Dial Number The phone number requested for dialing If line busy goto Action to be taken when line is busy If no answer goto Action to be taken when there is no answer If error goto Action to be taken in case of error Details Dial operation dials a number User may define the action to be taken in case the line is busy or there is no answer or in case of error Example Dial Number 9786789 IF line busy goto Busy IF no answer goto Busy IF error go to Error Event24x7 User Manual Version 8 1 05 4 304 event 24x7 4 8 2 End Voice END VOICE OK Exit Code ERROR C User Purpose End script with exit code Fields Exit Code Radio button to signal return code Use User to set your own return code Setting return code enable you to set some action on CES or DES Details End voice script with return code Example Exit Code OK Event24x7 User Manual Version 8 1 05 4 305 event 24x7 4 8 3 Get Digits GET DIGITS Number of digits to get blasimum time in seconds IF na line goto ERROR IF error goto ERROR Purpose Get input from the caller Allow the Voice script to ask the caller how to proceed The caller types the answer with the telephone keypad Fields Number of digits to get Maximum time in Seconds to wait for action completion seconds If no line go to Label name If error go to Labe
360. to avoid them in advance It does this by initiating cyclic checks every time interval This interval is configured in the When tab of the Collector Details of the exact check to be conducted are specified in the execution Tab of the collector In the Parameter we indicate how to react to the results of the checks conducted by the Collector First the parameter specifies exactly how the results of the collector s checks will be kept and in what field s For more details refer to the Create Tab of the Parameter Then using these results a list of additional checks is conducted see Parameter s state Tab which end up in one of the following states Severe Error Warning or Ok For each state there is an appropriate Action tab which gives Event24x7 exact instructions what to do next The Exception and FileWatch monitors as opposed to Pro Active can not anticipate errors in advance but only intercept and detect them upon arrival They work together first the file watch monitor which is alerted every time new data is written into a file and then the exception monitor which parses this data and looks for the appearance of a specific pattern When such a pattern is intercepted and found the exception monitor is set to a specific state which lets the parameter know exactly what to do next see applicable State Action tab All this information is stored in different objects The Exception monitor is comprised of three objects Monitor Inte
361. to make the Pipe Name unique Terminal Size Screen size rows by columns Event24x7 User Manual Version 8 1 05 3 53 event 24x7 3 1 3 2 2 4 Telnet Connection for UNIX and Linux Host Name Telnet to host name specified here IP Address Telnet to host by IP address Socket type TCP or UDP socket Port Port number Check Alive Tick box if you wish to check if host is alive Terminal Size Screen size rows by columns Event24x7 User Manual Version 8 1 05 3 54 event 24x7 3 1 3 2 2 5 SSH Connection for UNIX and Linux Manage UNIX and Linux Operating System with SSH Event24x7 executes plink Putty batch in background Target C Host Name P Address 192 168 0 123 Method Non Interactive Plink ha Check Alive Promt Pree Fatter The Fromt is pattern Terminal Size 24 80 Host Name Target host name IP Address Target host TCPIP address Port Port number The default port for SSH is 22 Check Alive Tick box if you wish to check if host is alive Prompt Prefix Optional You can specify the prompt or just prompt s prefix The prompt is a pattern Tick box if you wish the prompt prefix to act as a pattern for other prompts Terminal Size Screen size rows by columns Event24x7 User Manual Version 8 1 05 3 55 event 24x7 3 1 3 2 2 6 MAPI Client Connection for Emails Manage Emails from a private folder The MAPI interface is based upon an Exchange client that must exist on the s
362. to the Script Definition section Email addresses Select between Specify insert content manually Template use predefined template Default use Event24x7 default mail Email subject Email content Optional attached file The mail server name 4 139 event 24x7 4 1 4 10 3 Notification Center Purpose Fields Mode Group Name Sending Order Notify Order Message DES Server Event24x7 User Manual Version 8 1 05 Use Notification Center to handle the alert Sending mode Available options Complete Acknowledgement Broadcasting Group name for sending the notification to its recipients Sending order Available options Use Group Default According to On Duty Calendar According to Weekly Calendar Recipient Order Send to all Simultaneously Notify order Available options Use Group Default Only mails Mails and SMS Only SMS Start mail Retries SMS Start mail Escalation SMS Message to be sent The DES server to be used for sending the notifications 4 140 4 1 4 10 4 Display Purpose Fields 4 1 4 10 5 Beep Purpose Fields Details event 24x7 Display a message at the Focal Point Color Set the text color of the message Foreground Color Set the background color of the Background message Message Message to be displayed Play a beep on the PC internal speaker Frequency Frequency in hertz of the sound This parameter must be in the range of 37
363. to wait in milliseconds after each check before conducting a recheck Details Retrieves performance Monitor values Has similar values as the ones you get by running the Windows Performance monitor Type perfmon from the command line You can press the Helper Dialog button too to assist you in selecting the exact checks to perform from the perfMon Event24x7 User Manual Version 8 1 05 4 210 event 24x7 4 3 33 IB Performance VB Script IB Performance Monitor via YB Script Class Object Instance Computer Leave empty for local Purpose Retrieve values from the Windows Performance Monitor via use of a VB Script Class Performance monitor variable For the Object correct value open the performance Instance monitor and take the values from there Computer Computer name when required remote value For local computer leave it blank Event24x7 User Manual Version 8 1 05 4 211 event 24x7 4 3 34 IB Process IB Process Session AGENT z Purpose Check Existence Stop process or Create a new one Fields Name Process Name Expanding the combo box will bring the processes currently running on the desired session Choose one of them Type Type of activity Exist Terminate Create Session The session upon which you would like to perform the desired operation on a selected process Event24x7 User Manual Version 8 1 05 4 212 event 24x7 IB RESOURCE Type CPL k Name Loo For a specific proce
364. ty Stop the search after checking for rules with the same priority as the triggered one Continue Continue searching for other rules Creation date of the rule Date of last change Event24x7 User Manual Version 8 1 05 4 163 event 24x7 424 What Tab The What tab 1s used to define operations that trigger a rule Operation IDENTIFY STRING Audit Trial Command Event Viewer Identify Snmp String STRING String Sessan Status is Active Method Simple E Attribute al Case Sensitive Insensitive Exclude W Exclude What consists of one or more operations with AND OR NOT relationship A Rule is triggered if the operations criteria of the What are met Available operations Alert Command Event Event Viewer Identify Parameter SNMP String Alert processing Automation Check command entered from the Focal Point screen Perform action at a predefined time and date at a specific interval to activate the rule on a cyclic basis Check for specific Event Viewer records Check for specific message ID in the incoming message Provide Parameter correlation Check for incoming SNMP traps Check for specific strings in the incoming message An Event cannot be combined with other operations The String and Identifier depend on the nature of the incoming event message To add an operation choose from pull down box Event Command Identify or String The par
365. ual Version 8 1 05 11 641 event 24x7 12 User Experience The User Experience engine is a new and powerful tool of user actions simulator It can be used to simulate and test any set of actions done by the user such as opening a browser and accessing a web site or running a local application The User Experience engine is scheduler based just like a collector and it can run many tests one after the other This engine has a variety of options from simulation of keyboard and mouse activities through finding and clicking a specific control on the screen searching text in the screen and measuring time of actions This new engine enables you to check web sites availability run programs exactly as a user would have and simulate an entire set of actions completely automatically After each test the results will be sent to the Event24x7 for evaluation The results are caught by an interceptor just like the results of a regular agent RES After getting the results a parameter is used to decide whether the test ended successfully or whether there were problems along the way and if so which actions to perform sending email SMS rerun the script for second test results etc The parameter is identical to any other parameter used in the Proactive and Mange by Exception engines The set of actions for the User Experience engine is written in a simple script language called LUA script To this script language we added some special commands for
366. umber of pixels to move horizontally divy number of pixels to move vertically Search for text on screen Search will be executed for a given time Get text from a rectangle on screen Provide X Y coordinates as well as width and height of the rectangle You can choose the capture method from NATIVE FULL_TEXT OCR getTextFromActiveWindow Get text from active window String captMethod You can choose the capture method Event24x7 User Manual Version 8 1 05 12 649 event 24x7 NATIVE FULL_TEXT OCR insane key_press Press on selected key See next section for Key available keys MouseGoTo Move the mouse to a new location provide X X coordinates and Y coordinates Y MouseLeftDown Mouse left button pressed down MouseLeftUp Mouse left button release MouseRightDown Mouse right button pressed down MouseRightUp Mouse right button release PrintScreen Take a snapshot of the screen and save it into a filename file Filename the file name of the snapshot the png will be added automatically In case of empty argument the file name will be equal to the script name with the addition of quit End the User Experience simulator Run Run a program with parameters and method File Name Methods available Parameters FOLLOW_WINDOW Method FOLLOW_FOCUS type_text Type the selected text Text Wait Wait for a number of milliseconds Timeout write_output_file Write text to output
367. urpose IF Statement Fields Condition Specify expression If the expression is TRUE the workflow will continue to the statements on the TRUE side If the expression is FALSE the workflow will continue to the statements on the FALSE side 4 1 4 15 2 While Statement Purpose WHILE Statement Fields condition Specify expression If the expression is TRUE the statements in the WHILE will continue to execute Checking the Select when to check the condition condition At the beginning of loop At the bottom of loop Event24x7 User Manual Version 8 1 05 4 154 event 24x7 Loop count Maximum number of loops limit Max Iteration 7 4 1 4 15 3 Select Statement Purpose Select Statement Fields Condition Specify expression If the expression is TRUE the statements in the CASE group are executed If the expression is FALSE the next CASE statement is examined More CASE statement can be added 4 1 4 15 4 Case Statement Purpose Add CASE clause to the SELECT clause Fields Condition Specify expression If the expression is TRUE the statements in the CASE group are executed If the expression is FALSE the next CASE statement is examined 4 1 4 15 5 Action State Event24x7 User Manual Version 8 1 05 4 155 event 24x7 Purpose Add a selection according to current Workflow State Fields Condition The condition is TRUE according to the workflow s state OK Warning Error Severe Force Act
368. ut_file clickontext First rc r n if rc O then automator quit end automator wait 1000 automator type_text Amir filling details before download automator key_press TAB automator wait 1000 automator type_text Egozi automator key_press TAB automator wait 1000 automator type_text amire triggerplus com automator key_press TAB automator wait 1000 automator type_text TriggerPlus Event24x7 User Manual Version 8 1 05 12 654 automator key_press TAB automator wait 1000 automator type_text Support automator key_press TAB automator wait 1000 automator type_text is automator key_press TAB automator wait 1000 automator type_text Raanana automator key_press TAB automator wait 1000 automator type_text 9727749005 11 automator key_press TAB automator wait 1000 automator key_press ENTER automator wait 3000 rc automator ClickOnText Version 0 OCR single left 0 0 click on the word Version automator write_output_file clickontext Version rc r n if rc O then automator quit end automator wait 5000 rc automator ClickOnText Save 0 OCR single left 0 0 click on the word Save automator write_output_file clickontext Save rc r n if rc 0 then automator quit end automator wait 20000 automator quit end the script Eve
369. ution of this collector Parser OP Parser Variables Operation Details DOP Parser 2217 60 s Walue 20FARESDYAGENTLESS Expression 71 11 00 If conditions defined fail to exist on a cycle the collector will not execute Event24x7 User Manual Version 8 1 05 6 415 event 24x7 6 6 4 Intercept Tab STRING Operation Details l String k STRING ERROR A Method Simple Stings Lolurar jo To Attribute Any Case Sensitive 0 Insensitive Exclude list CT yx ft Exclude Only one field is relevant in this tab and it is the activity to perform It is selected from a pull down menu with the following options Event viewer Identify Information Base IB Snmp String User Experience Event24x7 User Manual Version 8 1 05 6 416 event 24x7 6 6 4 1 Event Viewer Event Viewer Sting Method Simple Strings z Case Sensitive Insensitive Event Header Type None Don t check hi Purpose Perform an action based upon a specific string that appears in the incoming Event Viewer message or according to the header of the message Fields String Method Case Type Source Category User Event ID Event24x7 User Manual Version 8 1 05 String to search Method to use for finding the string e Simple string search e Using wildcard search with and in pattern means any characters and means a single character Whether the search i
370. utsourre Flight Close Transactions to Outsource CUSTOMER COURIER COMPANY M 4 gt gt I1 Page 0 7 2 2 1 Display Shape Event24x7 paints the shape that is linked to a session with the suitable color The color reflects the highest severity for the session s parameters When the session state 1s changed Event24x7 will change the color automatically 7 2 2 2 Quick Summary Placing the mouse over a shape that represents a session will produce a quick summary for the session It displays in table format the number of existing errors in each state Event24x7 User Manual Version 8 1 05 7 565 event 24x7 Putting the mouse over a shape that 1s connected to a session and clicking the right button will open a popup menu that lets you investigate all the components of event24x7 7 2 2 3 Drill Down fa Magram trom NetworkMedim sdn HSA AA GALS atl amp My Network nter S e Definition Management aa Focal Point Connectivity Management Console Contral Center Remote Desktop Connection Configuration Event24x7 User Manual Version 8 1 05 7 566 EVENT 24x7 8 Management The Management part contains useful utilities that help and assist you with special activities 8 1 Backup Let Event24x7 take automatic backup of the user definition data Backup Event 4x7 User data mes At the above target directory Event4e will add the following Backup directory Event dey Backup dater st
371. ver to focus on Event24x7 User Manual Version 8 1 05 5 348 event 24x7 5 9 Variables Status Variables Status lists all user variables and allows updating of the variables Vanodwes status trom 05 76 7014 23 1707 x LOCAL DES r Ta Variable Name E DESHANDLES am There are two types of Event24x7 variables e System variables These are handled exclusively by Event24x7 The user cannot change them but can use them For more information on system variables refer to System Variables section e User variables These are variables that are handled from this screen and from the Action tab by means of the SET command described in the Set section A user variable is used to share data among different rules When a rule is executed it has access to the user variables currently defined The SET command can change the value of these variables Toolbar Add New Toggle the Add New Variable line The line is displayed at the bottom of the Variable screen To add a new variable fill the variable s Name and Value field and click on the OK button while on that line Change the selected variable value Delete the selected variable Servers list Choose Event24x7 Server to focus on Event24x7 User Manual Version 8 1 05 5 349 event 24x7 EventVoice Voice Status lists the voice cards and their channel statuses Ee Ven by OrGe statis 5 EventVoice is DOWN Press the refresh button to refresh st
372. vity A pull down menu shows a list of available activities All IB activities start with the IB prefix Available actions are explained on paragraph 4 5 Event24x7 User Manual Version 8 1 05 6 435 eve 6 9 Parameter Definition The Parameter handles a single entity from the monitored platform The Parameter Definition screen has four groups of activities Map the Collector s intermediate file to the Parameter Set the new state of the parameter according to the latest value Set the Staging Area key optional 6 e Perform the action of the Parameter s current state Momtonng VetintGon i Session AGENTLESS Pro Active Pro Active Approach E amp SNMPPrinter ed E LAE Lo Fae i TE ee SNMPSystem a amp i 2 Properties 3 Crea es 4 State H ga SNMPUtilization System a mT w E AvailableMBytes E chart Monitor Free Space ConsumingProcesses ee for all drivers Description l H cru H FreeSpaceAll lini FreeSpaceAll H HTTP MemoryUtilization PerfMon Ping H PortsTCP EH Process Statistics ee eae Created 2014 04 28 09 36 Ic aure WebAccess L H E Dashboard Parameter not updates Dashboard Icon Change El Ee 4 New W Delete tal Apply The Parameter screen has two parts e Parameter List The parameter list is located at the left pane of the screen and is displayed in a tree SPUB WUWO 8g upd st
373. w Rule Service None view 0 All Monitoring None view 2 All event 24x7 3 4 3 Definition Tab lEs Permission i None View All Voce Permission d None View All Bs Session C None Views 0 All Work flowy C None View All Scripts Permission 0 None View 0 All User Expenence None View All Definition tab is used to define security levels for the items found at the Definitions part of the Studio menu It contains Rules Permission IBs Permission IBs Session Scripts Permission Rule Service Voice Permission MIB Monitoring Diagrams and User Experience Permissions may be None View only or All permission to view and modify Event24x7 User Manual Version 8 1 05 3 87 vent 24x7 3 4 4 Operations Tab 4 Operations Focal Point i None Dashboard 0 None View All Aun Diagram d None View All Operations tab is used to define security levels for the items found in the Operations part of the Studio menu including Focal Point Alerts Dashboard Run Diagram and Reports Permissions may be None View only or All permission to view and modify Event24x7 User Manual Version 8 1 05 3 88 event 24x7 3 4 5 Statuses Tab Parameters Status None View All Monitors Status None View All Collectors Status None O Views All Statuses tab is used to define security levels for the Statu
374. w Fa Delete ii Apply Important Group name must be the name of an existing Service The connection between the rule and the service is done according to the Group name Event24x7 User Manual Version 8 1 05 4 318 event 24x7 4 10 1 General Tab lA Action ok E Action Warning 8 Action Error 2 Action Seve 4 P Name On gentless Group Example must be Service name Learming how to use a Rule Descriptions 0 Enable C Disable Statistics Status c Activate tf New x Delete if Apply Name Event24x7 Service Rule name Group Must be an existing Service Name Description Optional description Priority Rule priority from O lowest to 100 highest When several rules are triggered by an incoming message they are executed according to their priorities from the highest to the lowest Search How to continue the search for other rules to be triggered after the first one is triggered Available options Stop On First After the first rule is triggered stop the search Do not search for other rules Stop On Priority Stop the search after checking for rules with the same priority as the triggered one Continue Continue searching for other rules Created Creation date of the rule Changed Date of last change Event24x7 User Manual Version 8 1 05 4 319 event 24x7 By Name of the user who made the last change Event24x7 User Manual Version 8 1 05 4 320 event 24x7 The What t
375. window when a new mail arrives Event24x7 User Manual Version 8 1 05 4 233 event 24x7 4 3 52 Printer Status Run Printer Status Aun eet Script DES Traget 00 Attached result as CS to maill Mail Mailing List Purpose Schedule printers counters report via mail The format of the report determine by the Printer Status Data command from the Script Definition Fields Printer Status Script Entry from Script Definition that contains control definition for the result DES Target DES server name that printers related to it Attached result as Optionally attached the report as CSV to mail CSV to the mail Mail To Mail Target Mailing List Whether to use Event24x7 mailing list Server Event24x7 s server that will send the mail Details 4 3 53 PROGRAM Event24x7 User Manual Version 8 1 05 4 234 event 24x7 PROGRAM Type Serial wait tll end walt Minutes for time out Purpose Run a program on a specific server Fields Name Name and path of the program Parameters Run time parameters for the program Directory Directory path Type Tick this box if you wish to wait until file execution ends before continuing Otherwise program will execute in parallel to other operations Wait When executing in Serial mode allow time in minutes for program execution to end Server The server upon which the program will be executed Available options Current Server CES Server LOCAL DES and RE
376. wsing web pages or any other clients programs The Watchdog Event Server WES is responsible to keep the services of Event24x7 up and running It checks on the status of the installed services can be any combination of the 1 three and as soon as one is down it starts it up again Multiple Control and Management GUIs All five components CES DES RES UES and WES are installed as services Event24x7 solution contains a single CES a single WES and at least a single DES If required more DES can be installed on separate machines However in most cases a single DES that is installed at the same machine with the CES is more than enough to handle all of the site s needs RES is optional and installed only when there is a need for a local agent to run on a specific Windows platform Event24x7 User Manual Version 8 1 05 1 25 event 24x7 A Nolification UNIX C gftrel Event Server E CUE Lauk M JI pplication Server S Distruled Event Satver UPS Why we might consider using more than one single DES The reasons are security consideration and performance In situations that there are several segments in site network we might install one DES in each segment Each DES handles all the computers in that segment and reports to the same CES Another possibility is performance and scalability If for example Event24x7 monitored two remote environments It is wiser to install two DE
377. x7 User Manual Version 8 1 05 12 653 automator run iexplore nohome FOLLOW_FOCUS automator wait 10000 automator key_press ALT d automator wait 1000 automator type_text http www triggerplus com automator wait 5000 TimeStamp_1 automator get_timestamp automator key_press ENTER rc automator find_text TriggerPlus 10000 automator write_output_file find TriggerPlus re r n if rc gt O then TimeStamp_2 automator get_timestamp automator write_output_file TimeDiff www triggerplus com TimeStamp_2 TimeStamp_1 r n else automator write_output_file TimeDiff www triggerplus com 1 r n automator quit end automator wait 4000 rc automator ClickControl fromfile 0 single left click the Free Download control the selector is taken from the ControlFile txt line 0 automator write_output_file clickcontrol fromfileO re r n if rc O then automator quit end automator wait 3000 rc automator ClickControl fromfile 1 single left click the Download Now control the selector is taken from the ControlFile txt line 1 automator write_output_file clickcontrol fromfilel re r n if rc O then automator quit end automator wait 3000 rc automator ClickOnText First 0 OCR single left 200 0 click on the textbox next to the word First automator write_outp
378. x7 User Manual Version 8 1 05 18 708 event 24x7 19 Advanced Topics 19 1 Traveling messages between DES and CES 19 1 1 General The DES has connections to the various Sessions and it gets all the messages relating to the sessions The DES sends the appropriate messages to the CES When Event24x7 deals with a huge number of messages it is sometimes important to control the mechanism for better efficiency This situation is likely to occur when the DES intercepts large user log files The CES has four uses for every log record sent from the DES Display the record at the Focal Point Display the record at the Session s Terminal Send the record to the Rule engine on the CES The record part of the File Watch Control sends the record to the file browser 19 1 2 File Watch Control a If a record comes from s user log file that is under the File Watch Control it will always be sent to the File watch Control The user can t change this process 19 1 3 Focal Point and Terminal 1 Rule triggered on the DES If a Rule is triggered on the DES due to an incoming record it always controls whether to send the record to the CES If at least one of the triggered rules has the Suppress Message option selected in the DO Display the record will not be sent to the Focal Point Please note that you can always create a rule that suppresses the message 2 Norule triggered Set according to the Process on CES option located on the Advance
379. y Server On what server to play the specified audio file Options are All EventStudio Current Server CES Server LOCAL DES and REMOTE DES Details Event24x7 will start the suitable program according to the file extension Event24x7 User Manual Version 8 1 05 6 526 event 24x7 6 10 55 Popup Popup ans FOO ShowD elay S000 mz Theme Office 2003 PopupT heme hi Transparent l O 255 Message Purpose Popup a window message on the Studio This is one of the notification options available Fields Animation Control how the popup window appears Animation Delay Show Delay Theme Type of popup window Transparent Transparency of the popup Message The main message to display Details This is similar to exchange popup window when a new mail arrives Event24x7 User Manual Version 8 1 05 6 527 event 24x7 6 10 56 Printer Status Run Printer Status Aun eet Script DES Traget 00 Attached result as CS to maill Mail Mailing List Purpose Schedule printers counters report via mail The format of the report determine by the Printer Status Data command from the Script Definition Fields Printer Status Script Entry from Script Definition that contains control definition for the result DES Target DES server name that printers related to it Attached result as Optionally attached the report as CSV to mail CSV to the mail Mail To Mail Target Mailing List Whether to use Event24x7 mailing
380. y default Action occurs only when a state was changed As long as the state of an object remain the same the Action Will not be executed You can change this locally with PRM Force Action This forces execution of the Action in each cycle Force Action manages the Action part globally It enables you to force performing the Action at two points when the parameter s state wasn t changed e At the first check cycle of the parameter e After n checks or after a specific period of time for example after every hour Prevent Action Control the Action part behavior When an object s state changes often from OK to Error and you don t want to get several emails if mail is part of the Action Error you can use this option to tell Event24x7 not to perform the Action part every time the state becomes an error For example not to send an email more than once in an hour Event24x7 User Manual Version 8 1 05 6 440 event 24x7 Report Specify if this parameter will keep the value in a report ready file Automatic Reset the current state to state OK or other state which is less Resetting severe than the current one after a specific amount of time This is done to ensure that the parameter doesn t stay stuck in the same state for too long especially if 1t s an error state which could have been caused by a bad check or unexpected result Important note Only valid for Exception Monitors not proactive Event24x7 User Manu
Download Pdf Manuals
Related Search
Related Contents
Calculated Industries Scale Master Pro XE SVAT Electronics pmn User's Manual 医薬品インタビューフォーム User Manual Sin título-1 MS 100 - Harman Kardon Copyright © All rights reserved.
Failed to retrieve file