Event views are modified in the MMC however viewing the results is more efficient using the ELM Management Console.
Administrators can quickly diagnose problems by using Event Views to organize large amounts of event log information. Event Views allow you to group events that match Include and/or Exclude Filters with the options to notify or report based on that Event View. Open an Event View to see new events as they occur plus events that may be present from past database queries (view refreshes). The first time an Event View is opened, a database query will be run if the Event View is empty. Otherwise, database queries are run only when a view is manually refreshed or when the properties of the view are modified. When an Event View is refreshed or an Event View's properties are modified, a database query is run and events from the database, as well as those streaming in, will be displayed.
Records in Event Views are generically referred to as "Events." Events originate from several sources:
•Event log entries collected from Windows-based systems.
•Syslog messages received from Syslog clients.
•SNMP Traps received from SNMP-capable systems and devices.
•ELM Server generated Events.
•
An Event View has two display modes:
•Detail Event View mode (default) which shows each event on a single line in the Event View.
•Summary Event View mode displays a summary roll-up (i.e., count of events). This Event View display mode is very useful to determine the busiest events across multiple systems by sorting on the Count column heading.
ELM comes pre configured with a variety of Event Views and are sorted into logical groupings. Event Views beginning with All represent general events grouped by type or protocol. Names can be modified for the requirements of a specific environment.
Notifications
When the Notification Method is applied to the Event View, the events that are displayed are what you will get notified on.
Excluding Events
Select the event that you want to exclude.
Create View
Select an event in the Event View, select Create View to automatically create an Event Filter and navigate through the Create Event View Wizard.
Create Filter
Select an event in the Event View, select Create Filter to automatically create an Event Filter and navigate through the Create Event Filter Wizard.
Event View Properties
Reports from an Event View
Beginning with ELM 7.5 reports from Event views are exclusive to the ELM Management console.