Dell · Table 1-1 Terms associated with Aggregation Term Definition Aggregation Level This...

EMC Ionix IT Automator

Monitoring Server

Console User Guide

Version 5.8 REV A01

December 2009 300-010-377

EMC Corporation Corporate Headquarters:

Hopkinton, MA 01748-9103

1-508-435-1000 www.EMC.com

Monitor

EMC Ionix IT Automator

Monitoring ServerConsole User Guide

Date: December 2009Version 5.8

REV A01 Document Number: 300-010-377

EMC CorporationCorporate Headquarters,

Hopkin, MA 01748-9103U.S.A.

Tel. 1-508-435-1000

http://www.EMC.com

iv RELEASE: 5.8 REV A01 300-010-377

Copyright © 2009 EMC Corporation. All rights reserved.Published December, 2009

EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice.

THE INFORMATION IN THIS PUBLICATION IS PROVIDED “AS IS.” EMC CORPORATION MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABIL-ITY OR FITNESS FOR A PARTICULAR PURPOSE.

Use, copying, and distribution of any EMC software described in this publication requires an applicable software license.

For the most up-to-date regulatory document for your product line, go to the Technical Documentation and Advisories section on EMC Powerlink.

For the most up-to-date listing of EMC product names, see EMC Corporation Trademarks on EMC.com.All other trademarks used herein are the property of their respective owners.

Publication History 1December 2009

A01. This is the initial version of the EMC Ionix IT Automator Monitoring Server Console User Guide for Release 5.8.

EMC IONIX IT AUTOMATOR MONITORING SERVER CONSOLE USER GUIDE v

vi RELEASE 5.8 REV A01 300-010-377

Table of Contents 1

Overview 11About the Monitoring Server Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1Terms and Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2Analytics Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2Analytics Results . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2Analytics Run . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2Data Concatenation Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2General Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5Conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7Logs, Files, and Streams . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-9Functional Screens . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-9

Getting Started 21Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1Starting the Automator Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1Becoming Familiar with MS Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2Dashboard Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3Events Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6Reports Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7Analytics Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8Automation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-9Settings Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-10MS Console Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11

Streams window 31Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1Streams Window View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1Configuring Stream View Columns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2Viewing the Streams . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3Renaming a Stream . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-7

Automation screen 41Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1Setting up Events and Counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1Attaching and Removing Events and Counters from Streams . . . . . . . . . . . . 4-6

EMC IONIX IT AUTOMATOR MONITORING SERVER CONSOLE USER GUIDE vii

Analytics screen 51Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1BasicStat Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1Using the BasicStat Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3Using the Analytic Results window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-9

Events screen 61Viewing and Analyzing Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-1Viewing the Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-1Analyzing the Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-2Monitoring live data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-16

Event Types 71Adapter Event Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1Application Monitor Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-5

Live Monitoring 81Live Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-1Monitoring the overall system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-1Monitoring Counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2Monitoring live data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2

Reports screen 91Generating Charts and Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-1Generating Charts/Reports from the Reports Screen – From Counter . . . . 9-2Generating Charts/Reports from the Reports Screen - From Analytics Output 9-4Generating Charts/Reports from the Analytics Screen . . . . . . . . . . . . . . . . . . 9-4Generating Charts/Reports from the Reports Screen – From Report dialog box 9-5Report Editing Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-7

Settings screen 101Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-1General (Non-Screen View) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-2Display (Screen View) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-3Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-4Saved Formats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-5System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-6About MS Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-6

Using Charts 111Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-1Interactive Charting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-1Adding a Chart to the Dashboard from the Counters window . . . . . . . . . . 11-3Adding a Chart to the Dashboard from the Analytics screen . . . . . . . . . . . . 11-5

viii RELEASE 5.8 REV A01 300-010-377

Defining Chart Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-5Using Zoom Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-7Using Fast Reverse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-7Using Fast Forward . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-8Selecting a Stream for viewing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-8Using Time Intervals Display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-8Defining Chart Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-9Live Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-12Defining Interval View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-12Adding a New Chart to the Dashboard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-13Adding, Saving, and Deleting an Existing Chart . . . . . . . . . . . . . . . . . . . . . . . 11-13Viewing Counters Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-15Detaching and Moving Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-16

Dialog Boxes and Icons in MS Console 121Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-2Analytics Run . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-2New DataSet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-5Run Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-7Create an Event Class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-9Create an Event in a Class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-10Add Condition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-11Edit Condition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-12Add Event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-13Edit Event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-14Create a Counter Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-15Create a Counter in a Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-16Add Counter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-17Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-18Add Element to Workspace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-20Chart Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-22Select Time Intervals . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-26Columns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-27Quick Jump . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-28Custom Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-29Streams Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-30Time Series Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-31Report Results Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-33Analytics Results Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-34Saved Formats in the MS Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-35Save Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-36Save Event View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-37Open Event View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-38

Appendix A: Analytics Functions 131Analytics Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-1

EMC IONIX IT AUTOMATOR MONITORING SERVER CONSOLE USER GUIDE ix

Appendix B: Troubleshooting 141Troubleshooting Scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-1

Index I1

x RELEASE 5.8 REV A01 300-010-377

1Chapter
Overview 1
Topics in this section:• About the Monitoring Server Console• Terms and Concepts• Analytics Results • Analytics Run• Data Concatenation Types• General Definitions• Conditions• Logs, Files, and Streams• Functional Screens

About the Monitoring Server Console 1

The EMC Monitoring Server (MS) Console provides a graphical user interface that allows you to monitor events generated by the Ionix IT Automator Server and Adapters. With the MS Console, you can perform the following tasks:

• Monitor events generated by the Automator Server and Adapter by hostname or date. Events are displayed in near real-time mode.

• Customize a System dashboard with a graphical health monitor gauge, Counters, System Health Summary and Details, Streams, and multiple charts.

• Create new Event descriptions and Event Class categories.• Display all events for a particular host and create filters to only display specific

information. • Generate up to eight different types of summary reports that identify the

number of completed and failed transactions and time spent on each transaction type.

• Generate up to eight different types of charts that provide a graphical representation of transactions. Chart types include line, bar, and pie charts.

EMC IONIX IT AUTOMATOR MONITORING SERVER CONSOLE USER GUIDE 1-1

Terms and Concepts OVERVIEW

Terms and Concepts 1

In order to better understand how MS Console works and how you can use it efficiently, make sure you are familiar with the following terms and concepts.

Analytics Modules 1

The Analytics Modules is a subsection of the Analytics screen that helps you perform the analysis. The BasicStat section contains the basic statistics, which is used to analyze the events of a log. The basic statistics include Count, Max, Mean, Median, Min, Mode, Quartiles, Stats, StdDev, and Sum. For more information, see BasicStat Modules on page 5-1.

Analytics Results 1

The Analytics Results is a subsection of the Analytics screen that contains the results from the Analytic Modules. You can also use this to create charts to view and analyze events.

Analytics Run 1

The Analytics Runs is a dialog box in the Analytics Modules. From this dialog box, you can select the streams and events to process data sets. You can also determine how to collect the data based on the Period Length and Aggregation Level.

Data Concatenation Types 1

To aggregate the events, you can select the Data Concatenation Types. This helps you view and study the events. There are three types of aggregations as shown in Figure 1-1. Some examples of Aggregation Types are shown in Figure 1-2.

1-2 RELEASE 5.8 REV A01 300-010-377

OVERVIEW Data Concatenation Types

Figure 1-1 Types of Aggregations


Data Concatenation Types OVERVIEW

Figure 1-2 Examples of Aggregation Types

Table 1-1 Terms associated with Aggregation

Term Definition

Aggregation Level This aggregates the events using the Interval that you defined. The Aggregation Level default is 1 minute and shows up in the Analytics Run dialog box. The Interval, on the other hand, is part of the Counters in the Automation screen. Note that the level cannot be lower than the Interval. That is, if the Interval is 60 seconds, then the level must be equal to or greater than 60 seconds. The Aggregation Level is a step above the Interval and one below the Period Length.

1-4 RELEASE 5.8 REV A01 300-010-377

OVERVIEW General Definitions

General Definitions 1

Table 1-2 describes the terms associated with the MS Console.

Interval This aggregates the events into one number based on the defined number of seconds. The default is 60 and found in the Automation screen under the Counters tab.

The lowest level you can define is 1 second. With the default at 60, this means that MS Console will count all the events found in 60 seconds and place them into a bucket. MS Console then aggregates the next number of events based on the defined number of seconds, and places them into another bucket. This continues until the stream is complete. This is the lowest level for aggregation.

Period Length This takes the events from the Aggregation Level and aggregates them based on a defined length. The default length is 1 hour in the Analytics Run dialog box. For example, if the Period is 1 hour and Aggregation Level is 1 minute, then MS Console aggregates all the 1-minute levels into an hour. The results show the total number of events per hour. If the Period changes to 1 minute, then the results show the number of events per minute.

Table 1-2 Terms associated with the MS Console

Term Definition

Act Act refers to the application or service doing something.

Analysis Analysis is the drilling down into what caused a certain act to occur based on the diagnosis of the systems.

Application This is short for application software.

Buckets This refers to the placing of data intervals into larger levels of data.

Charts These are the graphs generated by the MS Console.

Children This is the most common level of hierarchy in this manual. This is typically the streams. It is the second from the bottom of the hierarchy.

Class This is one or more events placed in a set or group.

Counters The name of the action that MS Console performs to count each defined event.

Table 1-1 Terms associated with Aggregation

Term Definition


General Definitions OVERVIEW

Counter Group The placement of counters into a group. You can classify the groups based on requirements. For example, one counter group can focus on one type of service and the other can be a specific stream from an application. The name of the Counter Group typically matches the Event Class.

Data This is any information captured by the logs from the systems.

Developer This is the person responsible for creating and or maintaining the applications of the company.

Diagnosis This refers to the steps that you take to find out where and what is going on with the systems.

Events This is a record of a certain act occurring in a running system. Events are used to identify the specifics of what occurred, and are often used to audit or diagnose problems later. Events include information such as the date and time of the event occurrence, some indication of the severity of the event, and a description of what happened. These events are usually recorded in a log so they can be analyzed. This log may be a file or database. MS Console works primarily on text-based log files, which usually consist of the event data followed by a new line indicating the end of the event. Following is an example of an event recorded this way:2009/17/08 00:00:02 1 Error01 O H 0 Arrival rate exceeds service rate: -0.49412 review system ID 2456

Event Class This is a type of events placed into a class. You can create events based on requirements or categories. For example, one event class can consider a certain type of service, while another event class can be a specific stream from an application. The name of the Event Class typically matches the Counter Group.

Event-Counter This ties the name of the event to the counter. It is a reference.

Events-Views This is the window where you can view the streams the way you want. You can also perform various functions using the Event Toolbox to analyze the streams.

Field Field is a column. That is, when you process a stream of data in MS Console, the Console parses it into columns. Each column is a field where MS Console begins the naming convention with Field_0 and increments by one until it reaches the end of the event.

Graphs These are the charts created in MS Console.

Grandchildren This is the lowest of the hierarchy level of streams.


Term Definition

1-6 RELEASE 5.8 REV A01 300-010-377

OVERVIEW Conditions

Conditions 1

Conditions are the types of editing functions used to help identify characters, words, or trends in a stream. MS Console supports three types of conditions as shown in Figure 1-3 and described in Table 1-3. For more examples, see Filtering Condition Examples on page 6-6.

Grandparent This is the highest level of the streams. It is rare unless there is a folder inside another folder. If so, then the grandparent is the highest-level folder.

Hierarchy This refers to the stream allocations. It begins with the grandparent, followed by the parent, children/child, and grandchildren/grandchild.

Live Monitoring This means the MS Console automatically processes the streams as soon as the data is available in the stream. It processes the stream either when it receives notifications by the operating system or at a periodic polling interval.

Parent This is the second most common level. This is typically the folder level of the streams. If a folder is inside another one, then the parent becomes the folder that is inside the folder. The top folder then becomes the grandparent.

Quick Jump Key The QJ are the “[” and “]” keys used to move around inside the Events-View window based on the defined times.

Reports Reports are the charts that you create from the Report screen. Reports provide a chart, summary tables, and a report summary.

Table Viewer This shows the raw count value by period of the data set of a chart from the Dashboard screen. The data set can be one event or a collection of events. It depends on how the you define them.

Time Series This is a sequence of data points based on successive times.

Users The users are the individuals that use the MS Console.

MS Console Screens

These are the six major functional screens in MS Console defined by the tabs at the top of the screen, giving you the ability to process and analyze the logs of the company. The screen names are Dashboard, Events, Reports, Analytics, Automation, and Settings.


Term Definition


Conditions OVERVIEW

Figure 1-3 Condition Recognition

Table 1-3 describes the terms associated with Conditions.

Table 1-3 Terms associated with Conditions

Term Definition

Expression The Expression condition allows you to define events based on the fields of a stream. This type of condition also uses Boolean expressions.

For example: severity = 'SEV1' will match any event with a severity of SEV1. Any other events will not be matched. Only the Severity attribute is searched. You can combine these into larger expressions using the AND and OR.

Another example that will match any SEV1 or SEV2 events is as follows:severity = 'SEV1' or severity = 'SEV2'

Regex The Regex condition is an advanced way of finding text within a stream. It uses search qualifiers such as “?”, “*”, and “+”. For example, the “?” means it will match zero or one of the previous token. Hence, the Regex condition “tabl?” matches “tabcloth”, “tabelcloth” and “tablecloth”.

Text The Text condition is a way of finding a specific character, word, or set of words anywhere in the stream. For example, the text “Acme Co.” means that MS Console will perform its function on every instance of this text.

1-8 RELEASE 5.8 REV A01 300-010-377

OVERVIEW Logs, Files, and Streams

Logs, Files, and Streams 1

The terms logs, files, and streams refer to the data imported into MS Console. It is important that you become familiar with this section. Streams area time-order sequence of events. For more information, use Figure 2-6 as a guide.

Functional Screens 1

MS Console has six major functional screens with distinct functions. You can access each screen by the tabs displayed at the top of the screen. The first tab is the Dashboard window where all monitoring takes place. Dashboard is the default window you see when you launch MS Console. However, you can change the default window, if you wish to, from the Settings screen. Table 1-4 describes the screens in alphabetical order.

Table 1-4 MS Console Functional Screens

Term Definition

Analytics This screen provides you with various statistical functions to analyze the logs. Additionally, it allows you to develop charts and report. The Analytics Modules window under this screen allows you to select the type of analysis to run. To view the results, you have to access the Analytics Results window.

Automation Events and Counters tabs on this screen help you to define what events to search for and how to count them.

Dashboard This screen helps you monitor the systems and view its health. From this screen, you can format and process the streams. You can also navigate to some specific periods in the stream from the chart to analyze what is going on with the systems.

Events This screen allows you to view and analyze the streams. You can rearrange the columns and hide them. You can also remove data from the view, search for events, and drill further into the data. From this screen, you can also set up the events that you want to count in a stream based on how you defined the events in the Automation screen.

Reports This screen allows you to create and view various charts and reports. You can create them using the Report Modules and view them through the Report Results window.


Functional Screens OVERVIEW

Settings This screen helps you to customize MS Console according to your needs, including setting up the analytics default aggregation level, customizing the views, and setting up the maximum number of in-memory events. The screen is divided into the following categories:

• General

• Display

• Performance

• System Information

• About

Term Definition

1-10 RELEASE 5.8 REV A01 300-010-377

2Chapter
Getting Started 1
Topics in this section:• Introduction• Starting the Automator Console• Becoming Familiar with MS Console• Dashboard Overview• Events Overview• Reports Overview• Analytics Overview• Automation Overview• Settings Overview• MS Console Summary

Introduction 1

EMC Monitoring Server (MS) Console is a powerful tool that helps you view and understand the systems. You can analyze and monitor the systems while being more efficient.

The following sections provide an overview of the functional screens of the MS Console.

Starting the Automator Console 1

To start the MS Console from Windows, complete the following steps:1. Click the Start menu in Windows.2. Select All Programs.3. Select the directory where the program is.4. Click the directory.5. Double click the MS Console icon.


Becoming Familiar with MS Console GETTING STARTED

Becoming Familiar with MS Console 1

MS Console has six main functional areas as tab keys at the top of the screen. Each tab has a specific task to help you with system analysis. Figure 2-1 shows you the opening screen of the MS Console. When you start the MS Console, you see the Dashboard screen.

Figure 2-1 Opening Screen of the MS Console

2-2 RELEASE 5.8 REV A01 300-010-377

GETTING STARTED DASHBOARD OVERVIEW

Dashboard Overview 2

The Dashboard is the default screen of the MS Console. From this screen, you can process the streams. Once the streams are setup, imported, and processed, you can view the events that came from the streams through the Time Series window. You can view one stream with one or multiple events, or multiple streams with multiple events. You can analyze them by mixing and matching the events from the same or different services.

In addition, you can double click any point on the chart, which opens the Views window in the Events screen. From the Events screen, you can view and analyze the events that occurred at that time. Figure 2-2 shows the Dashboard screen and its features.

Figure 2-2 Dashboard Screen Properties and Features


DASHBOARD OVERVIEW GETTING STARTED

System Health

The System Heath gives an overall view of how the systems are behaving. It gives a graphical indication on the health of each host stream. The health is calculated based on different health events generated by the MS Console.

The following two views are associated with the System Health:

• System Health Summary • System Health Detail

System Health Summary

The System Health Summary window shows a high-level view of the system health state. A value of 10 (green zone) means the system is healthy and in perfect working condition, while a decreasing value means the system has some problems. The needle on the meter updates in real-time based on events received from the MS Console. Each time the MS Console sends the same event type, it has a negative effect on the system health, indicating that a problem still exists and that corrective action is required.

A low-watermark exists at the value of 1. This means that the health will never go below 1 unless a communication (connection) failure occurs between the MS Console and an adapter or automator instance. In the case of a connection failure, the value goes to a zero, indicating a more serious situation. Figure 2-3 shows a graphical view of the System Health Summary window.

Figure 2-3 System Health Summary Window

System Health Detail

The System Health Detail window provides a visual indication of all the system health events that are currently active. You can place the mouse over an event to see the details, such as the time of the event, the number of times the event occurred, and the reason of the event.

2-4 RELEASE 5.8 REV A01 300-010-377

GETTING STARTED DASHBOARD OVERVIEW

Figure 2-4 Viewing System Health Detail

Dashboard menu

The right click menu on the Dashboard screen allows you to show or hide the System Health window. You can show or hide Counters, Streams, System Health Summary, and System Health Details windows. Additionally, with the right click menu, you can add new interactive chart windows to the Home or custom Dashboard tabs.

To display the Dashboard menu, right click on any Dashboard window title or on an empty space on the Dashboard.

Figure 2-5 Dashboard menu


EVENTS OVERVIEW GETTING STARTED

Events Overview 2

The Events screen allows you view the imported streams. It shows the streams in a readable format based on thirty events per page. You can modify the lines per page in the Views window toolbar or change the default in the Settings screen.

Events screen also allows you to set up events you want to capture in order to monitor them in the Dashboard screen. Setting up events involves using the Explorer-Events window. Once events are set up and processed, you can view the streams in the Views window indicated by the tabs. In addition, by selecting an event, you can view the details of that event in the Event-Detail window below the Explorer window.

On the Views window, you can conduct an in-depth analysis of events. You can remove and reorder columns and select specific events or items to view. For example, you can choose to view only those events that have errors in them or view events that have specific customers. Additionally, you can view only those events if the arrival rate goes above a certain capacity. You can also jump to a specific point in the stream and copy it to the clipboard. Figure 2-6 shows the Events screen.

Figure 2-6 Events Screen

2-6 RELEASE 5.8 REV A01 300-010-377

GETTING STARTED Reports Overview

Reports Overview 2

The Reports screen helps you create various charts and summary reports. Chart types range from line, bars, and pie charts. You can create charts from the Report Modules window on the Reports screen or from the Analytics screen. Summary reports are generated from the Reports screen.

Once you create the reports, you can view them from the Report Results window. This window shows the name of the reports and its creation date. You can also place them in the Dashboard screen under a different tab name from Home. Figure 2-7 shows the Reports screen.

Figure 2-7 Reports Screen


Analytics Overview GETTING STARTED

Analytics Overview 2

The Analytics screen allows you to conduct statistical analysis. The Analytics Modules window has the BasicStat section, which provides basic statistics, such as counting events and providing their summary statistics. You can select as many events and modules you want per run.

The Analytics Results window on the Analytics screen contains the results from the Analytic Modules. The results show the specifics of the data. In addition, you can re-run the analysis with different events and parameters, which keeps you from having to recreate the analysis. Figure 2-8 shows the Analytics screen.

Figure 2-8 Analytics Screen

2-8 RELEASE 5.8 REV A01 300-010-377

GETTING STARTED Automation Overview

Automation Overview 2

The Automation screen contains the Event and Counters tabs.

Events

The Events tab allows you to view specific events that MS Console creates automatically (see Figure 2-9). It also allows you to look for custom events and perform analysis and reporting of custom events. This tab also lets you define the type of Event Class. Typically, you create the Event Class based on some type of requirements, services, systems, or servers. Defining Event Class helps you categorize and keep track of things.

Counters

The Counters tab lets you enter the name and description of the Counter Group. You can add the individual counters to the group and also define what interval to use. The intervals must be in seconds. The default is 60, which is the smallest level that MS Console allows you to conduct your analysis. The default is 60 seconds.You can also perform analysis and reporting on your own custom event counters. Figure 2-9 shows the Automation screen, which defaults to the Events tab.

Figure 2-9 Automation Screen


SETTINGS OVERVIEW GETTING STARTED

Settings Overview 2

The Settings screen helps you to modify various items in MS Console. You can personalize the settings to fit your needs using the General, Display, Performance, or Saved Formats categories on the left of the screen.

In the General area, you can define the aggregation level and default period. In the Display area, you can determine what color schemes to use for the Views window in the Events screen. You can set the events per page, Quick-Jump (QJ) key interval, and the text format and time zones. In the Performance area, you can set in-memory limits and use other defaults to improve the performance of MS Console. In the Saved Formats area, you can remove the saved formats. These include Charts, Filters, and Event Views.

The System Information and About areas contain general system information about MS Console, contacts, and credits. Figure 2-10 shows the Settings screen.

Figure 2-10 Settings Screen

2-10 RELEASE 5.8 REV A01 300-010-377

GETTING STARTED MS CONSOLE SUMMARY

MS Console Summary 2

MS Console is a powerful tool that provides you with several features to help you view, analyze, and monitor your systems. To use MS Console effectively, make sure you understand Terms and Concepts on page 1-2 and also refer to EMC Ionix IT Automator Monitoring Server Installation and Configuration Guide. Figure 2-11 shows the names and associations of the various screens, windows, tabs, and terms between each other. This chart helps you to navigate through the MS Console.


MS CONSOLE SUMMARY GETTING STARTED

Figure 2-11 MS Console Screens Chart

2-12 RELEASE 5.8 REV A01 300-010-377

3Chapter
Streams window 1
Topics in this section:• Introduction• Streams Window View• Configuring Stream View Columns• Viewing the Streams• Renaming a Stream

Introduction 1

This section provides an overview of the Streams window in the EMC Monitoring Server (MS) Console.

Streams Window View 1

The MS Console automatically reads the log files and creates child streams under the Monitoring Server folder as shown in Figure 3-1.

Figure 3-1 Streams Window Hierarchy

Host Stream

Date Streams


Configuring Stream View Columns STREAMS WINDOW

Configuring Stream View Columns 3

From the Dashboard screen, use the configuration icon in the Streams window to set the columns. Double click the icon to open the Columns window.

Figure 3-2 Stream Column Display

You can also rearrange the columns through the Move Up and Move Down buttons. Select the column by highlighting it and make adjustments. Figure 3-2 shows the StreamID and EventCount selected to display on the Streams window. Highlighted is the StreamID that lets you move the position of the column on the display.

Table 3-1 describes the functions of the Columns.

Table 3-1 Stream View Columns

Column Name Description

StreamID This field shows the ID of the stream in numeric form.

Name This field shows the name of the stream.

ParentID This field shows the ID of the parent stream in numeric form

EventCount This field shows the number of events of the stream

UpdateMode This field shows the type of update mode.

StreamState This field shows the state of the stream.

3-2 RELEASE 5.8 REV A01 300-010-377

STREAMS WINDOW VIEWING THE STREAMS

Viewing the Streams 3

You can view the streams from the following windows:• Streams window in the Dashboard screen

Use the right click mouse to bring up the popup menu. This feature opens the view using saved view formats.

• Time Series window in the Dashboard screen • Explorer window Streams tab in the Events screenYou can start the view from the beginning of the stream or anywhere in between. You can also view the streams with or without setting up the events and counters for any family tree of streams in the Stream window.

Viewing streams from the Streams Window

To view a stream from any level from the Streams window, complete the following steps:1. Click the Dashboard tab.2. Double click the stream name from the Streams window. The Events screen

appears and displays the stream in the Views window. 3. View another stream by following steps 1 through 2.

Viewing streams using the Popup Menu

You can view a stream from any level from the Streams window using saved formats. In the Streams window, right click to bring up the popup menu.

ChildStreamCount This field shows the number of child streams under the parent.

EarliestEventTime This field shows the earliest time of the event in the stream.

LatestEventTime This field shows the latest time of the event in the stream.

IsPersistent This field shows if the stream is persistent.

StreamType This field shows the type of stream imported.

FailReason This field shows the reason why the stream failed.

Completion This field shows the percentage of file completed.

Table 3-1 Stream View Columns

Column Name Description


VIEWING THE STREAMS STREAMS WINDOW

Figure 3-3 Streams Popup Menu

Table 3-2 describes the functions of the Streams popup menu options.

Viewing a stream in the default view

To view a stream in the default view, complete the following steps:1. Select the stream name from the Streams window. 2. Right click to open the popup menu and select Open Default Event View.

The stream you selected opens in the default view in the Events screen.

Saving a stream view

To save a view of a stream, complete the following steps:1. Select the stream name from the Streams window. 2. Right click to open the popup menu and select Open Default Event View.

The stream you selected opens in the default view in the Events screen.3. In the Views window on the Events screen, right click and select Save View. 4. On the Save View window, enter a name in the View Name field.

Table 3-2 Streams Popup Menu Options

Option Description

Open Default Event View This option opens the stream in the default view in the Events screen. You can either save this view or take no action in order to open the stream in its original format.

Open Event View This option provides a list of saved views in a specified format. The list only shows what views are applicable to the selected stream. A different stream can have different views, depending upon how you saved the format. You can either save the format specific to a stream or save it where the view is applicable to any stream.

Rename This option enables you to rename a stream.

3-4 RELEASE 5.8 REV A01 300-010-377

STREAMS WINDOW VIEWING THE STREAMS

5. Select the check box Only show this view on the following stream if you wish to apply this view to several streams.

6. Select the stream for this view from the dropdown menu.7. Click OK.

Setting the default view of stream

The Default View opens the stream in the user specified format. If no default view is specified, then the MS Console opens the stream in its original format.

To set the default view of a stream, complete the following steps:1. Select the stream name from the Streams window. 2. Right click to open the popup menu and select Open Event View. The Open

Event View dialog box displays.3. Select the view for the stream from the list of Available Views. The Available

View is a list of format views that you saved in order to open this or other streams using this format.

4. Select the Set as default for stream check box.5. Click OK.

Resetting the stream view to its original format

The New View option opens the stream in its original format that came with the MS Console.

To reset the view of a stream to its original format, complete the following steps:1. Select (New View).2. Select the Set as default for stream check box.3. Click OK.

Viewing streams from the Time Series Window

To view a stream from any level and from a certain point in the Time Series window, complete the following steps:

1. Click the Dashboard tab.2. Scroll the chart from the Time Series window to find the desired point in

time.3. Select the point to reference by using the tool tip window. See Figure 3-4.

.


VIEWING THE STREAMS STREAMS WINDOW

Figure 3-4 Stream View from the Time Series Window

4. Double click it. MS Console opens the Events screen and displays the stream in the Views window for the specified time. See Figure 2-6.

5. Repeat this procedure to view another stream. This assumes that there is more than one chart to select from the Streams window.

Viewing Streams from the Streams Tab

From the Events screen, you can view a stream from any level using the Streams tab under the Explorer window.

To view a stream from the Streams tab, complete the following steps:1. Click the Events tab.2. Highlight the file, container, or folder stream from the Streams tab under the

Explorer window.3. Double click it. MS Console displays the stream in the Views window. See

Figure 2-6, Events Screen on page 2-6.

3-6 RELEASE 5.8 REV A01 300-010-377

STREAMS WINDOW RENAMING A STREAM

Renaming a Stream 3

To rename a stream, complete the following steps:1. Right click on the stream, for example, vmxp1 - Automator, as shown in Figure

3-5.2. Select Rename from the right click menu.Figure 3-5 Rename a stream

3. On the Stream Configuration window, type the new name in the Stream Name field.

4. Click OK.


RENAMING A STREAM STREAMS WINDOW

3-8 RELEASE 5.8 REV A01 300-010-377

4Chapter
Automation screen 1
Topics in this section:• Introduction• Setting up Events and Counters• Attaching and Removing Events and Counters from Streams

Introduction 1

This section describes the functions of the Automation screen in the EMC Monitoring Server (MS) Console. It shows how to add, edit, and delete, events, counters, classes of events, and groups of counters and how to import and export events and counters. Additionally, it describes how to process and view the streams from the Events screen and how to view and analyze Events, providing information about filtering and drilling down to the events.

Setting up Events and Counters 1

In order to track or count events and counters on the MS Console, you must first set them up. For example, on the Events screen, you can attach events and counters to a stream or folder based on what you defined earlier in the Automation screen. If you wish to add a new event or counter or modify them, then go back to the Automation screen and make additions or modifications.

The following sections show you how to add and delete events and counters and how to edit events.

Note: You cannot edit counters.


SETTING UP EVENTS AND COUNTERS AUTOMATION SCREEN

Adding an Event Class

To add an Event Class, complete the following steps:1. Click the Automation tab.2. Select the Events tab.3. Select the Insert a New Event Class icon. (Ctrl+A is the shortcut key.) The

Create Event Class dialog box displays.4. Enter the Class Name. Typically, this is also the name of the Counter Group.5. Enter a Description of the Event Class. 6. Click OK. This adds the Event Class.

Adding Events

To add an event, complete the following steps:1. Click the Automation tab.2. Select the Events tab.3. Select the Create New Event icon. (Ctrl+N is the shortcut key.) The Create

Event dialog box displays.4. Select the Event Class from the dropdown menu where you want to add the

event. 5. Enter the Event Name. This typically will also be the name of the counter.6. Enter its Description.7. Click the Add button to enter the Conditions. The Add Condition dialog box

opens.8. Select the Condition Type from the dropdown menu. Options are Text,

Expression, and Regex. For more information, see Conditions on page 1-7. You can add more than one condition type.

Note: The Expression uses the name of the field defined during the configuration process of the stream.

9. Type the Condition text in the Value box.10. Click OK. This adds the event. Figure 4-1 shows a typical example of an Event

Class and its events.

4-2 RELEASE 5.8 REV A01 300-010-377

AUTOMATION SCREEN SETTING UP EVENTS AND COUNTERS

Figure 4-1 Event Class and Events

Editing Events

To edit an Event Class, complete the following steps:1. Click the Automation tab.2. Select the Events tab.3. Highlight the Name of the event.4. Select the Edit existing event icon. The Edit Event window displays.5. Modify the name of the event, its description, or its conditions.6. Click OK. This modifies the data of the event.

Deleting an Event Class

To delete an Event Class, complete the following steps:

Note: Deleting an Event Class removes all events.

1. Click the Automation tab.2. Select the Events tab.


SETTING UP EVENTS AND COUNTERS AUTOMATION SCREEN

3. Highlight the Name of the Event Class.4. Select the Delete icon.5. Click Yes to confirm the deletion. This deletes the Event Class and all its

events.

Deleting an Event

To delete an Event, complete the following steps:1. Click the Automation tab.2. Select the Events tab.3. Highlight the Name of the event.4. Select the Delete icon.5. Click Yes to confirm the deletion. This deletes the event.

Adding Counter Groups

To add a Counter Group, complete the following steps:1. Click the Automation tab.2. Select the Counters tab.3. Select the Insert a New Counter Group icon. The Create Counter Group

dialog box displays.4. Enter the Group Name. This typically matches an Event Class.5. Type the Description of the Counter Group.6. Click OK. This creates the Counter Group.

Adding Counters

To add a Counter, complete the following steps:

Note: MS Console currently supports one Counter Type.

1. Click the Automation tab.2. Select the Counters tab.3. Select the Add a New Counter icon. The Create Counter dialog box

displays.4. Select the Counter Group from the dropdown menu. 5. Enter the Counter Name. This typically matches the name of the event in the

Event Class.6. Type the Initial Value where to start the counting. The default is zero.7. Select the Frequency in seconds from the dropdown menu to count the

event.

4-4 RELEASE 5.8 REV A01 300-010-377

AUTOMATION SCREEN SETTING UP EVENTS AND COUNTERS

Note: This is the lowest level for any further aggregation of events into larger size buckets. For more information, see Data Concatenation Types on page 1-2.

8. Keep the check box selected if you wish to Reset counter to its initial value at each interval.

9. Click OK. This creates the counter. Figure 4-2 shows an example of a Counter Groups and its counters.

Figure 4-2 Counter Group and its Counters

Deleting a Counter Group

To delete a counter group, complete the following steps:1. Click the Automation tab.2. Select the Counters tab.3. Select the Name of the Counter Group to delete.4. Select the Delete icon.5. Click Yes to confirm the deletion. This deletes the Counter Group and all of its

counters.


Attaching and Removing Events and Counters from Streams AUTOMATION SCREEN

Deleting a Counter

To delete a counter, complete the following steps:1. Click the Automation tab.2. Select the Counters tab.3. Select the Name of the counter to delete.4. Select the Delete icon.5. Click Yes to confirm the deletion. This deletes the counter.

Attaching and Removing Events and Counters from Streams 4

To process streams, you must first set up events and counters to collect the data and then attach them to the streams. You must set up events and counters to monitor and analyze systems. If you do not set up events and counters, MS Console counts the raw events only that are the Period Length of the stream. For more information about setting up the events and counters, see Setting up Events and Counters on page 4-1.

The following sections discuss how to attach and remove events and counters from a stream.

Attaching Events to a Stream

To attach a new event to a stream, complete the following steps:1. Click the Events tab.2. Select the stream from the Streams tab under the Explorer window. See

Figure 4-3.

4-6 RELEASE 5.8 REV A01 300-010-377

AUTOMATION SCREEN Attaching and Removing Events and Counters from Streams

Figure 4-3 Events Explorer Window

3. Select the Events tab from the Explorer window.4. Select the Add Event icon. The Add Event dialog box displays.5. Double click the Name of the event to attach to the stream.

Note: MS Console only allows attaching one event at a time.

6. Repeat the steps to add another event. Repeat until all required events are attached to the stream. Figure 4-4 shows an example of events attached to the “Monitoring Server” stream.

Note: Note that for every stream, MS Console automatically adds the event called the “RawEvent,” and adds the counter called the “RawEventCount”. Use this default event and counter to view or monitor all the events of a stream.



Figure 4-4 Events Attached to a Stream

Removing Events from a Stream

To remove an event from a stream, complete the following steps:

Note: Removing an event also removes all of its counters.

1. Click the Events tab.2. Select the stream from the Streams tab under the Explorer window. 3. Select the Events tab.4. Highlight the event to remove.5. Select the Delete icon. This removes the event and any of its counters.

4-8 RELEASE 5.8 REV A01 300-010-377

AUTOMATION SCREEN Attaching and Removing Events and Counters from Streams

Attaching Counters to a Stream

Attaching counters to a stream means that the counters count everything in the streams, the children, and roles it up to the parent, the stream. To learn more about the role of the counters, see Data Concatenation Types on page 1-2. If you created events and counters, you must attach them to a stream.

To attach counters to a stream, complete the following steps:1. Click the Events tab.2. Select the stream from the Streams tab under the Explorer window. 3. Select the Events tab.4. Highlight the stream.5. Click Add Counter icon. The Add Counter dialog box displays.6. Select the Name of the counter. Typically, the names match the names of the

events.7. Click OK.8. Repeat the steps to add another counter or until all required counters are

attached to the stream. Figure 4-5 shows an example of some counters attached to a single event attached to a stream. Note that MS Console automatically places the event and counter, RawEvent and RawEventCount, into the stream.

Figure 4-5 Counters Attached to a Stream



Removing Counters from a Stream

To remove a counter from a stream, you must remove them from the events. 1. Click the Events tab.2. Select the stream from the Streams tab under the Explorer window. 3. Select the Events tab.4. Highlight the counter to remove.5. Click the Delete icon . This removes the counter from the event and hence

the stream.

4-10 RELEASE 5.8 REV A01 300-010-377

5Chapter
Analytics screen 1
Topics in this section:

• Introduction• BasicStat Modules• Using the BasicStat Modules• Using the Analytic Results window

Introduction 1

EMC Monitoring Server (MS) Console provides you with some basic analytic capabilities to help you get a better understanding of the log data. This section describes how to use the Analytics functional screen and view the results.

BasicStat Modules 1

BasicStat Modules provides ten types of functions. The following sections briefly describe the functions BasicStat Modules along with examples. The examples center on “events” to give you a clearer knowledge of how to use each function. For more information about BasicStat Modules functions with examples, see Appendix A: Analytics Functions on page 13-1.

Count

Count is the frequency within the one period. If the period is 1-hour and the log data is for one full day, then the count is 24. The aggregation does not matter in this case.

Max

Maximum is the greatest value of a set of events over a defined range. If the aggregation is 1-minute and the period is 1-hour, then MS Console finds the maximum number of events based on these constraints. In other words, it


BasicStat Modules ANALYTICS SCREEN

finds the maximum within the hour using the one-minute totals of the events. For example, the Max for values 27, 38, 51, 65, 72, 88, and 93 is 93.

Mean

Mean is the average number of events. If the period is 1-hour and the aggregation is 1-minute, the MS Console averages the number of events based on the one-minute counts for the hour. Thus, for each hour of the stream, the MS Console provides an average. If the stream is one full day long, the MS Console shows twenty-four averages. For example, the Mean for values 27, 38, 51, 65, 72, 88, and 93 is 62.

Median

Median is the middle value of an event over a defined range. If the period is 1-hour and the aggregation is 1-minute, the MS Console finds the median based on the one-minute counts for the hour. Thus, for each hour of the stream, the MS Console provides a median. If the stream is one full day long, the MS Console shows twenty-four medians. For example, the Median for values 27, 38, 51, 65, 72, 88, and 93 is 65.

Min

Minimum is the least value of a set of events over a defined range. If the aggregation is 1-minute and the period is 1-hour, the MS Console finds the minimum number of events based on these constraints. That is, it finds the minimum within the hour using the one-minute totals of the events. If the stream is one full day long, the MS Console shows twenty-four minimums. For example, the Min for values 27, 38, 51, 65, 72, 88, and 93 is 27.

Mode

Mode is the most frequently occurring event or value of an event. If the period is 1-hour and the aggregation is 1-minute, the MS Console finds the mode based on the minute counts for the hour. For example, the Mode for values 7, 7, 7, 8, 11, 13, 16, and 18 is 7.

Quartile

There are two quartiles. The upper quartile is the top 25th percentile number of events. The lower quartile is the bottom 25th percentile number of events.

MS Console uses the Moore and McCabe, sometimes referred to as "M-and-M", to determine the quartiles. If the period is 1-hour and the aggregation is 1-minute, the MS Console finds the quartiles based on the minute counts for the hour. If the stream is one full day long, the MS Console shows twenty-four upper and lower quartiles. For example, the Upper Quartile for values 27, 38,

5-2 RELEASE 5.8 REV A01 300-010-377

ANALYTICS SCREEN Using the BasicStat Modules

51, 65, 72, 88, and 93 is 88. The Lower Quartile for values 27, 38, 51, 65, 72, 88, and 93 is 38.

Stats

The stats function is an overview of the log data. It has the basic stats. They are the Count, Max, Mean, Median, Min, Upper and Lower Quartiles, and Standard Deviation. It also includes the Range, Variance, Standard Error, Kurtosis, and Skewness. MS Console provides these results based on the aggregation level and period. It shows their totals for the entire length of the stream. It will not show the values for every period.

StdDev

Standard deviation is the amount of variability from the mean. That is, how much do the events go above or below the average number of events? If the period is 1-hour and the aggregation is 1-minute, the MS Console averages the number of events based on the one-minute counts for the hour. It then finds the standard deviation based on this criterion. Thus, for each hour of the stream, the MS Console provides a standard deviation. If the stream is one full day long, the MS Console shows twenty-four deviations. For example, the StdDev for values 27, 38, 51, 65, 72, 88, and 93 is 22.891.

Sum

Sum is a total number of events. It sums them over the period. The aggregation does not matter in this case. Thus, if the aggregation is 1-minute and the period is 1-hour, the MS Console sums the number of events based on the period. If the aggregation is 1-second, the sum is still the same. For example, the Sum for values 27, 38, 51, 65, 72, 88, and 93 is 434.

Using the BasicStat Modules 1

The BasicStat Modules give you a first glance at what the systems are doing. You can determine how often an event or set of events occur, their high and lows, and their averages. In addition, you can develop specific modules to help you analyze what the systems are doing. For example, you can develop a module that focuses on the central tendency of an event by including its Mean, Median, Mode, and Quartiles, or you can determine the variance of an event by including in its count the Min, Max, and StdDev.

You can run one module for one event or run them for multiple modules with multiple events.


Using the BasicStat Modules ANALYTICS SCREEN

Creating an Analytics report

Creating an Analytics report and viewing it from the Analytics Results window involves performing the following procedures:1. Setting up the Processing Interval2. Adding Counters to a stream3. Setting up the Analytics Output4. Adding modulesOnce you complete all the procedures, the report appears in the Analytics Results window.

Note: The following procedures assume that the MS Console processed the streams.

Setting up the Processing Interval

The first procedure for creating an Analytics report is to set up the Processing Interval.1. Click the Analytics tab.2. From the Analytics Modules window, double click one of the modules under

BasicStat, such as Max, as shown in1. Figure 5-1.Figure 5-1 Analytics Modules window

3. The Analytics Run dialog box appears, showing the default settings.

5-4 RELEASE 5.8 REV A01 300-010-377


Figure 5-2 Analytics Run Dialog Box

4. Keep the default setting of the Processing Interval field to “All available data” if you wish to include all the dates and times of the stream for conducting the analysis.

5. If you wish to modify the time interval, select the Clock icon.6. From the Select Time Interval dialog box, select the Use specified time

interval radio button.

Note: MS Console starts its aggregation based on the first instance of data. This means that if the data begins at 00:33:00 AM, and the period length is 1-hour, then the next counter begins at 01:33:00 AM. To start at 00:00:00 AM, select the Start time to include 00:00:00 AM.

7. Click OK. 8. From the Analytics Run dialog box, enter the name of the Result Label. This

name will display in the Analytics Results window.9. Select the Period Length from the dropdown list to divide the stream. Select

the length in minutes, hours, or days. MS Console sums the Aggregation Level into these periods buckets. For more information on periods, see Data Concatenation Types on page 1-2.

10. Select the Aggregation Level from the dropdown list to specify how many times the MS Console will process the events. For example, a “one-minute”



aggregation level means that the MS Console will collect the data every minute.

11. Complete Adding Counters to a stream procedure.

Note: The Aggregation Level cannot be lower than the Interval or greater than the period. Remember that you add the Intervals when adding the counters from the Counters tab on the Automation screen.

Adding Counters to a stream

The second procedure for creating an Analytics report is to add counters. 1. From the Analytics Run dialog box, click the Add Data Set button. The New

Data Set dialog box displays. 2. Select the stream from the Stream dropdown menu and double click the

desired stream. This can include a file, container or folder stream. Figure 5-3 shows a single stream selected.

Figure 5-3 Available Streams

3. Select the Counter from the dropdown menu. The default is RawEventCount.

Note: You can select a group of counters they previously defined in the Counters tab on the Automation screen. For example, Figure 5-4 shows that you selected the Main.adapter.acquisition.enqueue counter from the New Data Set dialog box. This means that the MS Console will only process this counter, which is part of a single event. If you had selected Add all counter from matching group, the MS Console would have included all the counters from the group.

5-6 RELEASE 5.8 REV A01 300-010-377


Figure 5-4 Counter Selection

4. Click OK. This brings back the Analytics Run dialog box.5. Repeat the steps to add more counters.6. To add a group of counters to a stream, complete the following steps:

a. Repeat the steps for adding a counter.b. Select Add all counters from matching group check box.

Note: If you selected a single counter from the group, and then went back to select a group by selecting the same counter, the MS Console will include the counter again. This does not affect the MS Console. It only adds to your list of items to view thus making them less efficient.

7. Click OK. This brings back the Analytics Run dialog box.8. To remove a counter from the stream, deselect the check mark adjacent to the

counter in the Input Data Sets box in the Analytics Run dialog box.9. Complete Setting up the Analytics Output procedure.

Setting up the Analytics Output

The third procedure for creating an Analytics report is to set up the Analytics Output.

Setting up the Analytics Output from the New DataSet window enables you to get a broader view of the analytics performed. To do this, you need to manipulate the output of the analytics of a stream. You can view the max or mean of these events by changing the length of the period. For example, you analyze the events of a stream file based on a 1-hour period with 1-minute intervals. However, you also want to view events based on 12 hours periods. You can use the Analytics Output to aggregate the 1-hour periods to 12-hour



sets based on the modules. You can also aggregate the 12-hour sets to days. For an illustration of this example, see Figure 5-5.

Figure 5-5 Aggregating Analytics Results

The aggregation lets you see the data based on the 12 or 24-hour periods. They can see the mean of the sum of events over a these periods. Thus, if the sum of events were 160, 1, 195, 154, 154, 164, 190, 72, 167, 168, 145, and 170, for the first 12-hour set, the mean would be 145.000. Additionally, if the sum of the second set were 167, 2, 143, 153, 153, 167, 163, 159, 112, 171, 177, and 157, the mean would then be 143.667. If ran against this 12-hour set, or ran as a 24-hour period, the mean would be 144.333 for both.

To set up the Analytics Output, complete the following steps:1. From the Analytics Run dialog box, click the Add Data Set button. The New

Data Set dialog box displays. 2. Select From Analytics Output radio button.3. Select the processed stream from the Run Label using the dropdown menu.4. Determine the event to run the label against from the Data Set dropdown

menu.5. Click OK. This brings back the Analytics Run dialog box.6. Complete Adding modules procedure.

Adding modules

The fourth and last procedure for creating an Analytics report is to add modules.1. From the Analytics Run dialog box, select the Add Module button.2. Highlight modules one at a time or in a series by using the control and shift

key respectively.3. Click OK. This brings back the Analytics Run dialog box.4. To remove a module from the stream, in the Modules area, deselect the check

box adjacent to the module.5. To add the current timestamp to your report, keep the Append timestamp to

Label check box selected in the Options area. 6. Verify the settings. Figure 5-6 shows an example of a stream ready for the MS

Console to process. Notice the labeling. Use a naming convention that is relative to what you are doing.

5-8 RELEASE 5.8 REV A01 300-010-377

ANALYTICS SCREEN Using the Analytic Results window

Figure 5-6 Analytics Run Prepared Stream

7. Click OK. This produces the output in the Analytics Results window.

Using the Analytic Results window 5

The Analytic Results window lets you view the results of the analytics created from the Analytics Modules. From this window, you can also generate additional results using the Label without having to go through the Analytics Modules. You can also modify some of the settings.

Viewing the Analytic Results

To view the results generated from the Analytics Modules, complete the following steps:1. Click the Analytics tab.2. Double click the Label from the Analytics Results window. The Result

Viewer displays. MS Console sets the default to the Time Series tab.


Using the Analytic Results window ANALYTICS SCREEN

Figure 5-7 Result Viewer

The Time Series tab in Figure 5-7 shows the modules selected from the BasicStat. Each line contains a period. Columns contain the modules. Thus, the first row has the date and time that is the period. The columns have the modules, Count, Max, and Mean, for the selected event-counter. In addition, the bottom of the screen shows the total number of rows and columns. This is useful as a quick reference to ensure the data needed came across.

3. Highlight the event-counter to view another set of event-counter. 4. Select the Summary tab to view the Stats by highlighting the event-counter.

This has a list of statistical values useful to understand what is going on with the systems. See Summary Stats on page 5-11.

Note: MS Console does not show the summary if you did not select the Stats module.

5-10 RELEASE 5.8 REV A01 300-010-377

ANALYTICS SCREEN Using the Analytic Results window

Figure 5-8 Summary Stats

Generating New Analytic Results

To generate additional analytics results, complete the following steps:1. Click the Analytics tab.2. Create and process the desired streams if not already done so. See Using the

BasicStat Modules on page 5-3.3. Highlight the Label.4. Select the Generate icon.5. Fill in the attributes of the Analytics Run dialog box. See Adding Counters to

a stream on page 5-6. This creates the new results.


Using the Analytic Results window ANALYTICS SCREEN

Deleting Analytic Results

To delete a single or folder of Labels from the Analytic Results, complete the following steps:1. Click the Analytics tab.2. Highlight the Label.3. Select the Delete icon.4. Click Yes to confirm the deletion.

Note: If you delete the parent folder , all reports are deleted.

5-12 RELEASE 5.8 REV A01 300-010-377

6Chapter
Events screen 1
Topics in this section:• Viewing and Analyzing Events• Viewing the Events• Analyzing the Events• Monitoring live data

Viewing and Analyzing Events 1

This section provides an overview of the Events screen in the EMC Monitoring Server (MS) Console. You can view streams from the Events screen or the Analytics screen. From this screen, you can filter the data. You can also remove columns, rearrange them, and include only events that you wish to see. In addition, you can use the Quick Jump (QJ) key to move to specific times within the stream by seconds to days.

Viewing the Events 1

Before viewing the events, you must process the streams. For more information, see the following sections:• Setting up Events and Counters on page 4-1• Attaching and Removing Events and Counters from Streams on page 4-6

To view the events, complete the following steps: 1. Click the Dashboard tab.2. Select the Name of the stream to view from the Streams window.3. Double click the stream name on the Streams tab. The Events screen opens

and displays the stream in the Views window. Repeat the steps to open additional streams.

4. Select the stream to view from the Views tab. This step assumes that you opened more than one stream from the Streams window in the MS Console Dashboard screen.


Analyzing the Events EVENTS SCREEN

Analyzing the Events 1

The following features in MS Console help you analyze the events of a stream. Table 6-1 lists and describes the features.

Table 6-1 Event Analysis Features

Function Description

Filter Filter allows you to filter the stream, log data. Use this option to view only the data that you need, add expressions, and remove columns.

Quick Jump (QJ) QJ allows you to jump to certain times and dates within the stream, such as move forward or backwards by seconds, minutes, hours, or days, in order to begin analyzing the events. In addition, you can use the buttons at the bottom of the screen to move in other ways.

Copy to Clipboard Copy to Clipboard enables you to copy the data to a spreadsheet or some type of word processor. You can share data with others, use it in presentations, or send the specifics of an event or set of events to another person.

XML Transaction Details XML Transaction Details enables you to drill down further into the event. You can match item number or other types of embedded codes to the source file and also get descriptions of what these numbers or codes mean.

6-2 RELEASE 5.8 REV A01 300-010-377

EVENTS SCREEN Analyzing the Events

Adding Filters using Conditions

The Views window in the Events screen shows the range of the streams. Figure 6-1 shows the streams without filters.

Figure 6-1 Streams without filter

Table 6-2 shows the functions available on the Views window.

Table 6-2 Views Window Options

Option Description

Select a custom filter or a previously saved filter.

• (no filter) means that no filters are applied to the selected stream.

• (custom filter) allows you to select a custom filter or a saved filter. The saved filter allows you to select from previously saved filters.



To add a filter to a stream with conditions, complete the following steps:

Note: This procedure assumes that streams data is already available at this Events screen.

1. Click the Events tab. 2. Select the stream to filter from the Views tabs window. Each tab is a stream.3. Right click inside the page to display the shortcut keys menu as shown in

Figure 6-2.

Display the number of lines per page. The default setting is 30. Select from the available defaults or enter a value of your own choice.

Note: You can also set the default in the MS Console Settings screen under the Display section.

Change the column settings.

View live monitoring of events.

Refresh the screen.

Stop processing or filtering the current stream.

Table 6-2 Views Window Options

Option Description

6-4 RELEASE 5.8 REV A01 300-010-377


Figure 6-2 Shortcut Keys

4. Select Configure Filter. The Custom Filters dialog box displays.5. Enter a condition using the Add button. The Add Condition dialog box

displays. For more information about conditions, see Conditions on page 1-7.

6. Select a condition from the Type dropdown menu. 7. Enter a value in the Value box. For example, you can select Expression as a

condition type and enter the following value:eventType = 'adapter.operations.create'

Figure 6-3

8. Click OK.

9. Click OK. The output looks like Figure 6-4.



Figure 6-4 Filtered Events via Conditions

Filtering Condition Examples

MS Console supports Boolean operations in the Type Expressions. Table 6-3 shows examples of the Expression condition.

Table 6-3 Example of Filtering Condition

Condition Example

Expression Display every event that has a transaction identifier associated with it:

transactionId <> 'null'

Display only acknowledgement events:

eventType = 'adapter.acquisition.ack'

Display any events with a Severity of SEV1 or SEV2:

severity = 'SEV1' or severity = 'SEV2'

Display all events related to a specified transaction:

transactionId = '7'

6-6 RELEASE 5.8 REV A01 300-010-377


Creating a Custom Filter

You can quickly create a boolean expression filter for any event attribute value. This reduces the complexity and the potential for errors by eliminating the need to manually type the boolean expression.

To create a custom filter for an attribute value, complete the following steps:1. Click the Events tab.2. Select an event in the Views window.3. Select an attribute, such as the hostname, and then right click to select Create

Custom Filter.

Display all acknowledgement events coming from the specified host name:

eventType = 'adapter.acquisition.ack' and hostname = 'vmxp1'

Display any events that contain the text "Complete" in the reason attribute:

reason contains 'Complete'

Table 6-3 Example of Filtering Condition

Condition Example



Figure 6-5 Creating custom filter

The Custom Filter dialog box opens, automatically populating the expression for the selected attribute.

Figure 6-6

4. Click OK.5. To add another expression to the selected attribute, right click and select

Append to Custom Filter. The Custom Filter window opens automatically populating another expression.

6. Click OK.

6-8 RELEASE 5.8 REV A01 300-010-377


Saving Filters

You can save filters created in the Views window and use the saved format on other similar streams.

To save the filter, complete the following steps:1. Open a stream in the Views window in the Events screen.2. Add the filter from the Custom Filter dialog box.3. Select the Save button. The Save Filter dialog box displays.4. Enter the Filter Name in the box or use the drop down menu to select an

existing filter. 5. Select the Only show this filter on the following stream check box if you

wish to use the filter for a specific stream. 6. Remove the check from the Only show this filter on the following stream

box if you wish to use this filter for any stream. 7. The default stream name under the check box is the current stream that you

are analyzing. To use this filter to another stream, select the stream from the dropdown menu.

Note: Using a saved filter for any stream does not guarantee results that you may be expecting. For example, if a filter defines a specific error to be displayed, but the error is not in other streams, then the Views window will display a blank screen.

8. Click OK.

Deleting Filters

To delete saved filters, complete the following steps:1. Click the Settings tab.2. Select Saved Formats from the menu on the left side of the screen.3. From the Format Type dropdown menu, select Filters.

4. Select the filter name.5. Click the Delete button.

6. Click Yes to confirm the deletion.



Filtering through Columns

To display or move columns around, complete the following steps:1. Click the Events tab.


2. Select the stream to filter from the tabs on the Views window. Each tab is a stream.

3. Right click inside the page and select Configure Columns from the shortcut keys. The Columns dialog box opens as shown in Figure 6-7.

Figure 6-7 Columns Dialog box

4. Select the check boxes to add or remove columns.5. Highlight the column name and use the Move Up and Move Down buttons

to change the order of the columns.6. Click OK. This adds, removes, and arranges the columns.

Column Sizing

MS Console automatically sizes the columns based on the best view for display. To let MS Console automatically size the columns, make sure that there is a check mark on the Auto Size Columns in the Views popup window. MS Console will change the size based on the data of the current page view. However, you can create the columns sizes to fit your needs.

To create the sizes of the columns, complete the following steps:1. Click the Events tab.

6-10 RELEASE 5.8 REV A01 300-010-377



2. Select the stream to filter from the tabs on the Views tabs window. Each tab is a stream.

3. Right click inside the Views window.4. Select the check box on the Auto Size Columns.

5. Use the mouse to modify the size of the column by placing the pointer on the right vertical line of the name of the column.

6. While holding the mouse, adjust the width by moving the arrow to the left or right.

7. Release the mouse. This sizes the column.

Jumping to Stream Points

To jump to certain points in the stream using the QJ key, complete the following steps:1. Click the Events tab.



3. Right click inside the page and select Jump from the shortcut keys. The Position Jump dialog box displays. See Figure 6-8.

Figure 6-8 Position Jump (Quick Jump) Dialog Box

4. Select the Jump by clicking the radio button. Table 6-4 describes Jump types.



5. Click OK.

Note: If you selected Relative jump, then you can continue to navigate through the shortcut keys based on the Offset.

Moving around with Navigation Buttons

You can move around using the navigation buttons at the bottom of the Events screen. Each button moves the streams accordingly.

Note: You can also use the shortcut keys to move around the Stream screens (see Figure 6-2, Shortcut Keys on page 6-5).

Table 6-4 Jump Types

Jump Type Description

Relative Jump A Relative Jump moves the events by the Offset. The default is 1 minute. This means that if you use the “[” and “]” shortcut keys, MS Console moves to the next closes value. That is, if the events have sequential minutes from 0 to 33, and then picks up at 38, when MS Console is at 33 and the you press the “]” key, MS Console goes to 38.

Note: Changing the Offset stays in effect until you change it or close the stream. To change the Offset, use the dropdown menu and select from second, minutes, hours, and days.

Absolute Jump An Absolute Jump moves to the point selected of the stream. When you select the date and time, MS Console moves you to that point where the error or event occurred. Unlike the Relative Jump, you must always select the date and time because it does not stay in memory.

Table 6-5 Streams Navigation Buttons

Button Description

Start Move to the beginning of the stream.

Prev Page Move to the previous screen page of the stream.

Next Page Move to the next screen page.

End Move to the last page of the stream.

6-12 RELEASE 5.8 REV A01 300-010-377


Copying to the Clipboard

To copy events or screen pages at a time from MS Console, complete the following steps:1. Click the Events tab.



3. Highlight the events.4. Right click inside the page and select Copy to clipboard from the shortcut

keys. This places the data into the clipboard.5. Copy multiple pages using the Next Page button.

a. Highlight the page.b. Click Ctrl+C to copy to clipboard.c. Paste data to the designated location.d. Return to MS Console.e. Click Ctrl+L to move to the next page in MS Console.f. Repeat the steps to copy to clipboard and paste data to the designated

location.

Viewing XML Transaction Details

To view XML transaction details, complete the following steps:

1. Click the Events tab.



3. On the Event Details window, double click inside the data1 value.



Figure 6-9 Event Details window

The Attribute Viewer dialog box opens, showing the XML transaction details.

Figure 6-10 Attribute Viewer dialog box

Note: You can also double click on any event in the Views window to bring up the Attribute Viewer dialog box and then click the data1 value to see the XML transaction details.

6-14 RELEASE 5.8 REV A01 300-010-377


Saving the Event Views

MS Console allows you to save and delete views. The Save View saves exactly how you had set up MS Console to display the events.

To save the view, complete the following steps:1. Click the Events tab.


2. Select the stream to filter from the tabs on the Views window. Each tab is a stream.

3. Design the view accordingly. See Adding Filters using Conditions on page 6-3 and Column Sizing on page 6-10 on adding filters and sizing columns.

4. Right click inside the page.5. From the shortcut keys, select the Save View. The Save View dialog box

displays.6. Enter the desired View Name or select a name from the drop down menu.7. Select the Only show this view on the following stream check box if you

wish to use this view is for a specific stream. 8. Remove the check from the Only show this view on the following stream

box if you wish to use this view for any stream.

Note: Using a saved view for any stream does not guarantee results that you may be expecting. For example, you set up a saved view to display a specific error, number of rows and columns, and reordering of rows. However, the error you specified is not in a stream you selected for viewing. In this case, the Views window will show the column headers of the Saved View, but the rows will have no data in them.

9. Click OK.

Deleting the Event Views

To delete the view, complete the following steps:1. Click the Settings tab.2. Select Saved Formats from the menu on the left side of the screen.3. From the Format Type dropdown menu, select Event Views.

4. Select the Name of the view to delete.5. Click the Delete button.

6. Select Yes to confirm the deletion.


MONITORING LIVE DATA EVENTS SCREEN

Monitoring live data 6

From the Views window in the Events screen, you can perform live monitoring of events matching the selected filter. For more information, see Monitoring live data on page 8-2.

6-16 RELEASE 5.8 REV A01 300-010-377

7Chapter
Event Types 7
This chapter identifies the event types for the Adapter and Application Monitor (Adapter and Automator).

Topics in this section:

• Adapter Event Types• Application Monitor Events

Adapter Event Types 7

The following types of events are generated for the Adapter:• Acquisition Queue - events are generated indicating the status of the

Acquisition Queue. Events are generated indicating:— the status of the queue item (i.e., the item is being placed in the queue,

complete)— if the queue item has an error— the status of the queue size — if the queue size has exceeded the defined threshold.— the status of the Automator/Adapter polling

• Operations - events are generated indicating the status of the data modification operations. This includes identifying the status of the modification operation or identifying if an error occurred during the modification operation.

Acquisition Queue Event Types

This section defines the various events that are built in to the system. • adapter.acquisition.enqueue - An item enters the acquisition

queue: — Severity - SEV4 — Reason - Item entered the Acquisition Queue.

• adapter.acquisition.enqueueError - An error occurs placing an item on the acquisition queue


ADAPTER EVENT TYPES

— Severity - SEV3 — Reason - Stacktrace and message of the error. — ServiceId - Used from the acquisition-event or notification servic.e — ObjectType - User supplied type or what is provided on the service. — RequestType - Either 'acquisition-event' or 'notification' depending on

the service called. — The data fields XML is placed in the data field.

• adapter.acquisition.ack - item on the queue is acknowledged as complete. — Severity - SEV4 — Reason - Transaction Marked as Complet.e

• adapter.acquisition.ackError - item on the queue is acknowledged as error. — Severity - SEV3 — Reason - user supplied error message.

• adapter.acquisition.pendingTimeout - A timeout occurred on a 'Pending' record. It has been set back to poll. — Severity – SEV3 — Reason – Pending Transaction Timed-out.

• adapter.acquisition.poll - Indicates a poll operation has been performed. This can be used as a heartbeat to verify that the Automator is alive. — Severity - SEV5 — Reason - Poll operation called

• adapter.operations.create - An data modification operation create is attempted — Severity - SEV4 — RequestType - create — ServiceId - Full class name of the service. — Reason - Create operation call succeeded.

• adapter.operations.update - An data modification operation update is attempted — Severity - SEV4 — RequestType - update — ServiceId - Full class name of the service. — Reason - Update operation call succeeded.

• adapter.operations.error - An error occurs during a modification operation — Severity - SEV3 — Reason - Stacktrace of the error.

7-2 RELEASE 5.8 REV A01 300-010-377

ADAPTER EVENT TYPES

— RequestType - Method name that caused the problem (i.e., create, update.)

— ServiceId - Full class name of the service.

Acquisition Queue Condition Events

The following events are triggered off of some condition in the Adapters. A service is required to periodically check the health of the Adapters (and Automator) and generate events if a problem is detected. • adapter.acquisition.queuesize - Acquisition queue size exceeds

the configured threshold. If the queue size gets too large that could indicate a problem. This error state is checked every 5 minutes. — Severity - SEV2 — Action - Set to 'clear' if the problem has corrected itself. — Reason - Acquisition Queue exceeded threshold. Queue size: x — Clear Reason - Acquisition Queue threshold cleared. Queue size: x

• adapter.acquisition.queuewait - Item available for poll on the acquisition queue has not been processed in a timely manner (Configurable timeout). This error state is checked every 5 minutes. — Severity - SEV2 — Action - Set to 'clear' if the problem has corrected itself. — Reason - Acquisition Queue wait time for X records — Clear Reason - Acquisition Queue wait time cleared

The following events are generated by the Automator when Health Monitoring is enabled. For more information on enabling Health Monitoring, see EMC Ionix IT Automator Monitoring Server Installation and Configuration Guide. • adapter.acquisition.consumer - Indicates that the poll service on

the Adapters have not been called within the required configurable time period. Automator poll calls are determined using the poll event listed above. This is often used to indicate that the Automator is down since it is not polling the adapter. This error state is checked once per 5 minutes. Since this message could often generate false positives, it is only sent once when the problem is detected. When the condition is cleared, the clear message is sent. — Severity - SEV2 — Action - Set to 'clear' if the problem has corrected itself. — Reason - No consumer is polling the acquisition queue. — Clear Reason - Polling of the acquisition queue restored.

• adapter.acquisition.producer - Indicates that the inbound agent service on the Adapters have not been called within the required configurable time period. This is performed using the adapter.acquisition.enqueue event type. This is often used to indicate that the Agent may be down and it is not calling the Adapter.


ADAPTER EVENT TYPES

This could also mean that there is no new data being produced in the endpoint application. This should be treated as indicating that there may be a problem. This error state is checked once per 5 minutes. Since this message could often generate false positives, it is only sent once when the problem is detected. When the condition is cleared, the clear message is sent. — Severity - SEV2 — Action - Set to 'clear' if the problem has corrected itself. — Reason - No producer is putting items into the acquisition queue. — Clear Reason - Queuing of items has been restored.

7-4 RELEASE 5.8 REV A01 300-010-377

APPLICATION MONITOR EVENTS

Application Monitor Events 7

The Application Monitor (AppMon) events can be for either the Adapters or Automator application. Many of the events are about the integration or the application using the Adapters. They are generated by the Adapter but indicate errors in Automator. The 'no consumer' event means automator is not polling the adapter queue. It indicates an automator problem

The following events are generated by the Application monitor. In the event, NAME identifies the name of the application that caused the problem: • appmon.cpu.NAME – Indicates that an application being monitored by the

AppMon component exceeded the CPU threshold. — Severity – SEV1 — Action – Set to ‘clear’ if the problem has corrected itself. — Reason – CPU Usage Exceeded the threshold, XX% — Clear Reason – CPU Usage is under the threshold

• appmon.memory.NAME – Indicates that an application being monitored by the AppMon component exceeded the memory threshold. — Severity – SEV1 — Action – Set to ‘clear’ if the problem has corrected itself. — Reason – Memory Usage Exceeded the threshold, XX% — Clear Reason – Memory Usage is under the threshold

• appmon.threads.NAME – Indicates that an application being monitored by the AppMon component exceeded the threads threshold. — Severity – SEV1 — Action – Set to ‘clear’ if the problem has corrected itself. — Reason – Thread Usage Exceeded the threshold, XX — Clear Reason – Thread Usage is under the threshold

• appmon.connection.NAME – Indicates that an application being monitored by the AppMon cannot be reached. Either the application is down, the server running the application is down or there is a network connectivity issue. — Severity – SEV1 — Action – Set to ‘clear’ if the problem has corrected itself. — Reason – Unable to establish connection to the application service.

The application may be down. Previous uptime was: xxh — Clear Reason – Connection re-established to the application service. — Data – Stacktrace of the failed connection.


APPLICATION MONITOR EVENTS

7-6 RELEASE 5.8 REV A01 300-010-377

8Chapter
Live Monitoring 1
Topics in this section:• Live Monitoring• Monitoring the overall system• Monitoring Counters• Monitoring live data

Live Monitoring 1

EMC Monitoring Server (MS) Console enables you to perform live monitoring of data. Live monitoring is available from the Dashboard and the Events screens.

Monitoring the overall system 1

System Health Summary window on the Dashboard screen provides a high-level view of how MS Console is working. It shows exactly where the systems stand. It allows you to keep an eye on various systems or the overall health of the systems.

To monitor the system from the System Health Summary window, complete the following tasks: 1. Click the Dashboard tab.2. Right click inside the System Health window.3. Click the Add Health Monitor.4. Select one or more monitors to add to dashboard.

5. Click OK. This adds the monitoring gauge. See Figure 8-1.Figure 8-1 System Health Monitoring Gauges


Monitoring Counters LIVE MONITORING

Monitoring Counters 8

Use the monitoring feature to help keep an eye on what the systems are doing. Monitor a single or a set of counters live.

To monitor the systems, complete the following steps:1. Click the Dashboard tab.2. Drag and drop the Name of the counter from the Counters window to the

Time Series window.3. Select the Live Monitor icon. This begins the live monitoring mode.

Monitoring live data 8

From the Views window in the Events screen, you can perform live monitoring of events matching the selected filter.

To monitor live data, complete the following steps:1. Click the Events tab. 2. On the Streams tab, double click the stream. The Views window shows the

events in the stream.3. On the Views window, click the Live Monitor button.

Figure 8-2 Viewing live events

This clears the display on the Views window. A message displays, indicating that the system is waiting for new events. All new events are displayed as soon as they are processed.

Note: If there is an active filter, then only events matching the filter will be displayed.

8-2 RELEASE 5.8 REV A01 300-010-377

LIVE MONITORING MONITORING LIVE DATA

Figure 8-3 Waiting for new events

4. To turn off live monitoring, click the Live Monitor button again.


MONITORING LIVE DATA LIVE MONITORING

8-4 RELEASE 5.8 REV A01 300-010-377

9Chapter
Reports screen 1
Topics in this section:• Generating Charts and Reports• Generating Charts/Reports from the Reports Screen – From Counter• Generating Charts/Reports from the Reports Screen - From Analytics

Output• Generating Charts/Reports from the Analytics Screen• Generating Charts/Reports from the Reports Screen – From Report

dialog box• Report Editing Features

Generating Charts and Reports 1

This section provides an overview of generating charts and reports from the Reports screen in the EMC Monitoring Server (MS) Console.

Table 9-1 shows the types of charts available from the Reports screen. All charts except the Pie Chart include the time series of the data.

Table 9-1 Types of Charts

Chart Description

Stacked Bar Chart Multiple data sets are stacked together.

Side Bar Chart Multiple data sets are placed next to each other.

Percentage Bar Chart Multiple data sets are stacked together and sized proportionally to sum to 100%.

Stacked Bar with Average Multiple data sets are stacked together with the average overlaid on top

Line Chart Line Chart

Time Series Moving Averages LIne Chart with Moving Averages


GENERATING Charts/Reports from the Reports Screen – From Counter REPORTS SCREEN

Additionally, MS Console automatically generates reports of specific events. A Report dialog box allows you to generate a report, which combines running the Analytics Modules with the Chart Modules to produce a report with summary information. To run a report, see Generating Charts/Reports from the Reports Screen – From Report dialog box on page 9-5.

Figure 9-1 Charts and Reports

Generating Charts/Reports from the Reports Screen – From Counter 9

To generate a report from the Reports screen, complete the following steps: 1. Click the Reports tab.2. Double click the Name of the chart to create from the Charts folder in the

Report Modules window. The Run Report dialog box displays.3. Enter the name of the chart in the Result Label. 4. If the module selected supports parameters, place them in the Module

Parameters box. This step is optional.

Pie Chart Distribution of the events based on the sum of its rates of the interval.

Pareto Chart Type of bar chart where the event totals are arranged in descending order.

Table 9-1 Types of Charts

Chart Description

9-2 RELEASE 5.8 REV A01 300-010-377

REPORTS SCREEN GENERATING Charts/Reports from the Reports Screen – From Counter

5. Select the Add Data Set button. The New Data Set dialog box displays.6. Click the From Counter radio button. This is the default.7. Select and double click the stream from the Stream dropdown menu.

Note: MS Console automatically sets the default Counter dropdown menu to the RawEventCount.

8. Select the Counter from the dropdown list. 9. To add all the counters, check the Add all counters from matching group

box.10. Click OK.

11. Select the Add Data Set button to add another Stream or Counter.

12. To add the current timestamp to your chart, keep the Append timestamp to Label check box selected in the Options area.

13. Click OK. This produces a chart like the one shown in Figure 9-2.

Figure 9-2 Example of a Line Chart


GENERATING CHARTS/REPORTS FROM THE REPORTS SCREEN - FROM ANALYTICS OUTPUT REPORTS SCREEN

Generating Charts/Reports from the Reports Screen From Analytics Output 9

To generate a report from the Reports screen, complete the following steps:1. Click the Reports tab.2. Double click the Name of the chart to create from the Charts folder in the

Report Modules window. The Run Report dialog box displays.3. Enter the name of the chart in the Result Label.4. If the module selected supports parameters, place them in the Module

Parameters box. This is optional.5. Select Add Data Set button. The New Data Set dialog box displays.6. Click the From Analytics Output radio button.7. Use the Run Label dropdown menu to select the output stream to add. 8. Select the event-counters from the Data Set dropdown menu by highlighting

it. 9. Click OK.

10. Select Add Data Set button to add another Run Label or Data Set.11. To add the current timestamp to your chart, keep the Append timestamp to

Label check box selected in the Options area. 12. Click OK. This produces the chart.

Generating Charts/Reports from the Analytics Screen 9

To generate a report using the Analytics screen, complete the following steps:1. Click the Analytics tab.2. Generate the analysis. See Adding Counters to a stream on page 5-6.3. Click the Reports tab.4. Double click the Name of the chart to create from the Report Modules

window. The Run Report dialog box displays.5. Enter the name of the chart in the Result Label. 6. Select the time from the dropdown menu in 7. If the module selected supports parameters, place them in the Module

Parameters box. This is optional. 8. Select Add Analytics Data Sets button. The Select Analytics Output dialog

box displays.9. Use the Run Label dropdown menu to highlight the analysis done in the

Analytics section.

Note: Most current analysis is at the bottom of the label.

9-4 RELEASE 5.8 REV A01 300-010-377

REPORTS SCREEN GENERATING CHARTS/REPORTS FROM THE REPORTS SCREEN – FROM REPORT DIALOG BOX

10. Click OK. 11. Select the Add Analytics Data Sets button again to add another set of data.

12. To add the current timestamp to your chart, keep the Append timestamp to Label check box selected in the Options area.

13. Click OK. This produces a chart like the one shown in Figure 9-3.

Figure 9-3 Example of Chart produced from Analytics

Generating Charts/Reports from the Reports Screen – From Report dialog box 9

To generate a report from the Reports screen, complete the following steps:1. Click the Reports tab.2. Double click the Name of the report to create from the Reports folder in the

Report Modules window. The Report dialog box displays. For example, if you selected the “Severities” report, then the Report - Severities dialog box opens.


GENERATING CHARTS/REPORTS FROM THE REPORTS SCREEN – FROM REPORT DIALOG BOX REPORTS SCREEN

Figure 9-4 Report Dialog Box

3. Enter the name of the report in Result Label. 4. Select what type of report to run from the dropdown menu. Time Selection

defines the time interval and aggregation level for the report. You can run a report with Daily Summary by Hour, Weekly Summary by Day, or Monthly Summary by Day.

5. Select the time to run the report from the dropdown menu.

Note: The selection depends on what type of report you selected. For example, if you selected Daily Summary by Hour, your options are Today, Yesterday, or select Day. If you selected Weekly Summary by Day, your options are This Week, Last Week, or Selected Week.

6. Click the Clock icon, which displays a Calendar interface. The Clock icon is enabled only when you want to enter a specific day, week, or month.

7. Select the starting day, week, or month from the Calendar interface and click OK.

8. Select the stream to process from the dropdown menu. Basis Stream allows you select a stream, including all child streams. The default stream is the “Monitoring Server” and will include all data.

9. To add the current timestamp to your report, keep the Append timestamp to Label check box selected in the Options area. If the check box is not selected, any existing report will be replaced.

10. Click OK. This creates a report in an HTML format, showing a chart with the selected period, one or more summary tables, and a report summary.

9-6 RELEASE 5.8 REV A01 300-010-377

REPORTS SCREEN Report Editing Features

Figure 9-5 Report generated from the Report Dialog Box

Report Editing Features 9

MS Console provides various features for editing or adding charts and reports from the Report Results window in the Reports screen.

Viewing the Reports

To view reports, complete the following steps:

1. Click the Reports tab.2. Select the Label to view from the Reports Results window.3. Click the View icon.

Note: You can also double click the highlighted Label.


Report Editing Features REPORTS SCREEN

Generating New Reports with an Existing Report

To generate a new report with an existing report, complete the following steps:1. Click the Reports tab.2. Select the Label to generate based on the same configuration from the

Reports Results window.3. Click the Generate a new report icon. The Run Report dialog box

displays.4. Do one of following steps:

a. Select the Add Data Set button and then select Stream and Counter from the From Counter radio button.

b. Select the Add Data Set button and then select Run Label or Data Set from the From Analytics Output radio button.

c. Select the Add Analytics Data Sets button and then select Run Label from the Select Analytics Output dialog box.

5. Click OK.

Adding Reports to the Dashboard

To add a report to the Dashboard, complete the following steps:1. Click the Reports tab.2. Select the Name of the Label to add to the Dashboard from the Reports

Results window.3. Click the Add report to the dashboard icon. The Add Element to

Workspace dialog box opens.4. Name the Dashboard tab or use the dropdown menu to select an existing

one.5. Enter the name of the Window Label.6. Select the Save Layout check box for future use. 7. Click OK. This produces the report in the Dashboard screen under the name

tab.

Starting a Suspended Task

To start a suspended task, complete the following steps:1. Click the Reports tab.2. Select the Label to continue the task from the Reports Results window.3. Click the Start icon.

9-8 RELEASE 5.8 REV A01 300-010-377

REPORTS SCREEN Report Editing Features

Stop a Running Task

To stop a running task, complete the following steps:1. Click the Reports tab.2. Select the Label to stop the task from the Reports Results window.3. Click the Stop icon.

Delete a Report

To delete a report, complete the following steps:1. Click the Reports tab.2. Select the Label to delete from the Reports Results window. It is possible to

select a folder. This deletes everything in it.3. Click the Delete icon.


Report Editing Features REPORTS SCREEN

9-10 RELEASE 5.8 REV A01 300-010-377

10Chapter
Settings screen 1
Topics in this section:• Introduction• General (Non-Screen View)• Display (Screen View)• Performance• Saved Formats• System Information• About MS Console

Introduction 1

EMC Monitoring Server (MS) Console provides the Setting options so that you can customize the MS Console to fit your needs and requirements.

The Settings screen contains five windows, which open from the menu list on the left side of the screen:• General• Display• Performance• System Information• About The following sections describe these windows.


General (Non-Screen View) SETTINGS SCREEN

General (NonScreen View) 1

The General window allows you to set unit defaults for the analytics period and aggregation level, change the initial screen tab MS Console starts with, and decide whether to show splash screen at the startup.

Set Analytics Default Period

To set up Analytics default period, complete the following steps:1. Click the Settings tab.2. Highlight General from the left side of the screen.3. From the Unit Defaults area in the General window, update the Analytics

default period and Analytics default aggregation level using the dropdown menus to the right of them. The default is 1-hour period and 1-minute aggregation level.

4. Click Apply.

Change Initial Screen Tab

To change the Initial Screen tab, complete the following steps:1. Click the Settings tab.2. Highlight General from the left side of the screen.

3. From the Startup area in the General window, select the screen from the Initial tab dropdown menu. The default is Dashboard.

4. Click Apply.

Remove Splash Screen

To remove Splash Screen, complete the following steps:1. Click the Settings tab.2. Highlight General from the left side of the screen.

3. From the Startup area in the General window, select the Show Splash Screen check box. MS Console has the default set to show the splash screen.

4. Click Apply.

Enable Diagnostic Operations

To enable Diagnostic Operations, complete the following steps:1. Click the Settings tab.2. Highlight General from the left side of the screen.

3. From the Startup area in the General window, check the Enable Diagnostic Operations box. MS Console has the default set to off.

4. Click Apply. This allows you to view the Performance Counters.

10-2 RELEASE 5.8 REV A01 300-010-377

SETTINGS SCREEN DISPLAY (Screen View)

5. To view the Performance Counters, complete the following steps:a. Click the Dashboard tab.b. Place the mouse pointer on any of the bars of the windows:c. Counters, Time Series, or Streams.

d. Right click the mouse and select Show Performance Counters. This displays the counter’s dialog box.

Display (Screen View) 1

The Display window enables you to change grid background and text colors, set the maximum number of events to show per page, set the amount to jump using the QJ key, format the date and time, and what time zone to use.

Change EventView Background and Text Color

To change Event-View background and text color, complete the following steps:1. Click the Settings tab.2. Highlight Display from the left side of the screen.

3. From the Event View area in the Display window, do the following:a. Select the Grid background color from the color palette. The default is

the icon on the screen or RGB 255 255 255.b. Select the Grid alternate color from the color palette. The default is the

icon on the screen or RGB 231 239 252.c. Select the Grid text color from the color palette. The default is the icon on

the screen or RGB 0 0 0.4. Click Apply.

Change Events per Page Display

To change Events per page display, complete the following steps:1. Click the Settings tab.2. Highlight Display from the left side of the screen.

3. From the Event View area in the Display window, select the Max events per page to display. The default is 30.

4. Click Apply.

Note: This does not go into effect on any current opened streams. You must select the stream again from the Explorer window Streams tab.


Performance SETTINGS SCREEN

Change QJ Key Amount

To change QJ key amount, complete the following steps:1. Click the Settings tab.2. Highlight Display from the left side of the screen.

3. From the Event View area in the Display window, enter the value of the Quick Jump Key amount and then select the units from the dropdown menu.

Note: This is for the “[” or “]” keys. It is still possible to bring up the control keys popup menu and manually select the amount to jump. The default is 1-minute.

4. Click Apply.

Change Date/Time Format

To change date and time format, complete the following steps:1. Click the Settings tab.2. Highlight Display from the left side of the screen.3. From the Date/Time Format area in the Display window, select the value of

the date and time format from the Text Format box. from the dropdown list. The default is yyyy/MM/dd HH:mm:ss. This stands for the year, month, day, hour, minute, and seconds. For example, the default date/time matches this format: 2009/10/12 08:33:15.

4. Select the Time Zone from the dropdown list. The default is Central Standard Time (America/Chicago).

5. Click Apply.

Performance 1

The Performance window enables you to maintain performance control of the desktop, notify the number of events in memory, and remove data older than a specific number of days.

Maximum InMemory Events

To set up maximum in-memory events, complete the following steps:1. Click the Settings tab.2. Highlight Performance from the left side of the screen. 3. From the Limits screen area in the Performance window, select the Maximum

in-memory events. The minimum is 5,000.

10-4 RELEASE 5.8 REV A01 300-010-377

SETTINGS SCREEN Saved Formats

Note: The maximum depends on the memory of the user’s desktop.

4. Click Apply.

Data Retention

To set up the number of days MS Console retains events data, complete the following steps:1. Click the Settings tab.2. Highlight Performance from the left side of the screen. 3. From the Data Retention screen area in the Performance window, enter a

number of days from the current date to retain events. 4. Click Apply. Data older than the specified number of days is removed from

the MS Console.

Saved Formats 1

The Saved Formats is a list of the formats that you had developed and saved when viewing and analyzing logs. These formats include Charts, Filters, and Event Views. The Format type dropdown menu provides the lists. The Name window displays the saved formats. You can use saved formats with the same log file or different ones. Table 10-1 shows the format types along with where you can find them.

Table 10-1 Types of formats

Format Location

Charts Dashboard Screen in the Time Series Chart window

Filters Events Screen in the Views window under the Custom Filter

Event Views Events Screen in the Views window using the right click button


System Information SETTINGS SCREEN

System Information 10

System Information window shows the number of events and counters in your system as described in Table 10-2.

About MS Console 10

The About window displays information about MS Console.

1. Click the Settings tab.2. Highlight About from the left side of the screen. The window shows the

product version and company name and address.

Table 10-2 Events and Counters

Name Description

Number of Events Total number of counters in the Counters tab of the Automation screen.

Number of Counters Total number of events in the Events tab of the Automation screen.

Number of Streams Total number of streams in the Streams window in the Dashboard screen.

Number of Interactive Charts

Total number of interactive charts in the Dashboard screen.

Number of Report Results

Total number of reports in the Report Results window in the Reports screen.

Number of Analytics Results

Total number of analytics in the Analytics Results window in the Analytics screen.

Maximum Data Sets Total number of data sets: interactive charts, Report Modules, and Analytic Modules

Maximum Stream Depth Total number of parents and children: Grandparent, parent, child, and grandchildren.

10-6 RELEASE 5.8 REV A01 300-010-377

11Chapter
Using Charts 1
Topics in this section:• Introduction• Interactive Charting• Adding a Chart to the Dashboard from the Counters window• Adding a Chart to the Dashboard from the Analytics screen• Defining Chart Types• Using Zoom Features• Using Fast Reverse• Using Fast Forward• Selecting a Stream for viewing• Using Time Intervals Display• Defining Chart Properties• Live Monitoring• Defining Interval View• Adding a New Chart to the Dashboard• Adding, Saving, and Deleting an Existing Chart• Viewing Counters Values• Detaching and Moving Windows

Introduction 1

The Dashboard screen, typically the default screen of the EMC Monitoring Server (MS) Console, allows you to analyze the Monitoring Server event data. You can use the interactive chart features to understand your system better and to transform the events.

Interactive Charting 1

Interactive charting offers several features, such as zooming in and out of charts for better viewing, selecting streams, and viewing the counters in a table. Figure 11-1 shows the features available from the Time Series window


Interactive Charting USING CHARTS

and briefly describes them. Others Time Series features are available from the popup menu shown in Figure 11-2.

Figure 11-1 Time Series Features Toolbar

Table 11-1 describes the functions of the Time Series icons.

Table 11-1 Time Series Icons

Icon Description

Pan View Moves the chart.

Increase View Changes the view period of the graph from large to more detailed increments.

Decrease View Changes the view period of the graph from more detail to larger increments.

Scroll to Start Moves the chart view to the beginning of the stream.

Scroll to End Moves the chart view to the end of the stream.

Select Stream Allows you to view the RawEventCount of the stream.

Adjust Interval Set the period of the graph to view.

Configure Chart Select titles, data sets, and appearance of the graph.

Live Monitor View the counters in near real-time.

Interval Display Select the interval of the stream to display.

Add Chart Add a new chart window on the Dashboard screen.

Load Chart Add an existing chart to the window.

Counter View View counters in a table format.

11-2 RELEASE 5.8 REV A01 300-010-377

USING CHARTS Adding a Chart to the Dashboard from the Counters window

Figure 11-2 shows the features available from the Time Series popup menu.

Figure 11-2 Time Series Popup Menu

Adding a Chart to the Dashboard from the Counters window 11

You can add a chart from the Counters window in the Dashboard screen. You can also use the charts to monitor the data live.

To add a chart to the Dashboard using the counters in the Counters window, complete the following steps:1. Click the Dashboard tab.2. Select the Name of the counter from the Counters window. 3. Click the Add counter icon. The New Data Set dialog box displays.4. Use the Select Stream dropdown menu to choose the stream.

Note: It is possible to select any hierarchy of streams from the grandparent to grandchildren.

5. Select the Counter from the dropdown menu.6. Select the Add all counter from matching group check box to include all

counters.7. Click OK.8. Highlight the counter with the left mouse button.9. Hold the button and drag it across to the Time Series window.10. Release the button. This converts the data into a chart as shown in the

following example in Figure 11-3.


Adding a Chart to the Dashboard from the Counters window USING CHARTS

Figure 11-3 Time Series Window

11. To view the raw counters of the chart, select the View counters in table view icon. The Table Viewer dialog box displays.

12. Repeat the steps to add more counters to the same chart.13. Select the Live Monitor icon. This moves the chart to the most recent

event data. As new data is processed, it is automatically updated in the chart. The chart scrolls as new data is added to the chart.

11-4 RELEASE 5.8 REV A01 300-010-377

USING CHARTS Adding a Chart to the Dashboard from the Analytics screen

Adding a Chart to the Dashboard from the Analytics screen 11

To add a chart to the Dashboard using the data sets defined in the Analytics section, complete the following steps.

Note: For more information about how to develop the analytics, see Using the BasicStat Modules on page 5-3.

1. Click the Dashboard tab.2. Right click inside the blank Time Series Chart window and select Chart

Properties. The Chart Properties dialog box displays.3. Select the Data tab.4. Select the Add Data Set button.5. From the New DataSet window, select the From Analytics Output radio

button.6. Select the desired Run Label from the dropdown list.7. Select the Data Set. 8. Click OK. The New DataSet window closes. 9. Click OK.This provides a visual of the data set processed in the Analytics screen. This means you can view the data sets based on any of the analytics and then use the interactive chart properties. For more information about the Chart Properties window, see Defining Chart Properties on page 11-9.

Defining Chart Types 11

You have several charts to select from to view data. The types of charts available are Bar, Stacked Bar, Stacked Bar 100%, Line, Area, and Stacked Area. You can view the charts in the Time Series or Time Series with Averages mode. The window does not require a chart to activate this property. However, if a chart is present, the MS Console converts the current it into the new one.

Note: The default is the Time Series window. It is not possible to convert this type of chart to the Time Series with Averages. You must create the average window and then load it with the counters.


DEFINING Chart Types USING CHARTS

Viewing charts in the Time Series window

To view a chart in the time series mode, complete the following steps:1. Click the Dashboard tab.2. Right click inside the Time Series window to bring up its popup menu.3. Highlight Chart Type.4. Left click the type of chart you want. This sets up or converts the current chart

to the new one.

Viewing charts with averages

To view the charts with the averages imbedded in the background, complete the following steps:1. Click the Dashboard tab.2. Click the Add Chart icon in the Time Series window. The Add Element to

Workspace dialog box displays.3. Name the Dashboard tab. The default is Home.4. Select the Time Series with Average Chart from the Element Type

dropdown menu.5. Enter the Window Label name. The default is Time Series with Average Chart.6. Select the Save Layout check box. 7. Click OK.8. Enter the counters you want to view into the created chart window. See

Adding a Chart to the Dashboard from the Counters window on page 11-3 on how to add a chart from the Dashboard screen. This produces a chart as shown in Figure 11-4.

11-6 RELEASE 5.8 REV A01 300-010-377

USING CHARTS USING Zoom Features

Figure 11-4 Time Series with Averages

The shaded area behind the bars is the average of the two events. This is useful to compare visually the individual events to the average of all the events.

Using Zoom Features 11

To see the chart from a higher or lower level, use the zoom icon. This changes the intervals on the chart. To zoom in and out, complete the following steps:1. Click the Dashboard tab.2. From the Time Series window, select the Increase or Decrease View icon. The

Increase icon increases the detail meaning that you drill to finer time increments. The Decrease icon decreases it.

Using Fast Reverse 11

To go to the beginning of the stream, complete the following steps:1. Click the Dashboard tab.2. From the Time Series window, select the Scroll to Start button. This takes

you to the beginning of the stream.


USING Fast Forward USING CHARTS

Using Fast Forward 11

To go to the end of the stream, complete the following steps:1. Click the Dashboard tab.2. From the Time Series window, select the Scroll to End button. This takes

you to the beginning of the stream.

Selecting a Stream for viewing 11

The stream selection allows you to view the RawEventCount of the stream. You can select any family configuration. You can also mix it with other counters.

Note: If the chart contains multiple counters, the stream selection replaces them with the RawEventCount.

To select a stream for viewing, complete the following steps:1. Click the Dashboard tab.2. Highlight the stream from the Select Stream dropdown menu from the Time

Series window.3. Double click the stream. This displays the chart with the new data.

Using Time Intervals Display 11

Use the Time Interval feature to view a range of data. MS Console displays only the interval you select. This helps you to identify the problem and find its location. To change the time interval, complete the following steps:

1. Click the Dashboard tab. 2. Click the Adjust Interval icon from the Time Series window. The Select

Time Interval dialog box displays.3. Click the Use specified time interval radio button.4. Fill in the Start and End dates and times.5. Click OK.

11-8 RELEASE 5.8 REV A01 300-010-377

USING CHARTS DEFINING Chart Properties

Defining Chart Properties 11

The Chart Properties dialog box has the following three tabs each with multiple features:

• General• Data• Appearance

General

The General tab contains the chart titles and scales. It has the options to show the toolbar, legend, vertical and horizontal grid lines, and the append aggregation level to the vertical title.

1. Click the Dashboard tab. 2. Click the Configure Chart icon. The Chart Properties dialog box displays.3. Select the General tab. This is the default for the Chart Properties dialog box.

See Figure 11-5.Figure 11-5 General Chart Properties

4. Fill in the Chart Title.5. Provide a Vertical Title if desired. The default is Events.


DEFINING Chart Properties USING CHARTS

Note: MS Console automatically puts in the aggregation level unless you deselected the check box in the Options section. For example, MS Console puts in “MyEvent/hour” for aggregations in hours.

6. Modify the Vertical Scale using the Maximum and Minimum boxes.7. Select the following check boxes under Options to activate them:

a. Show Toolbar to display the toolbar.b. Show Legend to display the legend.c. Vertical Grid Lines to display the vertical lines.d. Horizontal Grid Lines to display horizontal lines.e. Append aggregation level to vertical title to show up on the vertical

axis.8. Click OK.

Data

The Data tab enables you to add one or more data sets to view as a chart. You can add them or rename them from a counter or the analytics output in the New DataSet dialog box.

1. Click the Dashboard tab.2. Click the Configure Chart icon. The Chart Properties dialog box displays.3. Select the Data tab to add a data set. See Figure 11-6.

Figure 11-6 Data Chart Properties

11-10 RELEASE 5.8 REV A01 300-010-377

USING CHARTS DEFINING Chart Properties

4. Click Add Data Set. The New DataSet dialog box displays. See Counter Selection on page 5-7.

5. Click the radio button From Counter to add a stream.a. Select the Stream from the dropdown menu.b. Select the Counter from the dropdown menu.c. Select Add all counters to select the entire group of that stream.

6. Select From Analytics Output radio button to add a label.a. Select the Run Label from the dropdown menu.b. Select the Data Set from the dropdown menu.

7. Click OK. 8. To change the name of the Data Set, select the data set and then click the

Rename button. The Rename Data Set dialog box displays.9. Enter the New Display Name for the chart in the box.10. Click OK.11. Click OK.

Appearance

The Appearance tab enables you to change the chart type, chart size, background color and text, and horizontal and vertical view. It also let you make the chart 3 dimensional.

1. Click the Dashboard tab.2. Click the Configure Chart icon. The Chart Properties displays.3. Select the Appearance tab to add a data set. See Figure 11-7.

Figure 11-7 Appearance Chart Properties


Live Monitoring USING CHARTS

4. Click Chart Type to change it.5. Select the Size of the chart from the dropdown menu.6. Select the Color from the dropdown menu. The default is #FFFFFF or RGB 255,

255, 255.a. Highlight the Background to alter the color of the chart.b. Highlight the Text to change its color.c. Highlight the Grid Lines to modify the color of the lines.

7. Select the check boxes in Options to activate them:a. Swap horizontal/vertical to change the view from horizontal to vertical

and back.b. 3D Effect to make the chart lines and or columns appear transparent in

three dimensional.c. Solid Color to make the chart lines and columns solid.

8. Click OK.

Live Monitoring 11

MS Console allows you to monitor the systems live. You can view a stream as it comes in. For more information, see Monitoring Counters on page 8-2.

Defining Interval View 11

The Interval View dropdown menu enables you to view a chart in different periods, giving you different perspectives of the same data. For example, if you are viewing an event-counter based on 30-minute intervals with 1-minute aggregations, you may not get a clear picture of what the system is doing. However, if you take the same event-counter and view it based on a 1-day interval with 1-hour aggregations, you can see what the system is doing over a longer period. See Figure 11-8.

Figure 11-8 Different Intervals for Same Data

On one hand, the 30-minute interval shows a consistent pattern. On the other hand, the 1-day one shows how the system behaves over longer periods. The

11-12 RELEASE 5.8 REV A01 300-010-377

USING CHARTS Adding a New Chart to the Dashboard

figure indicates that the system has a steady level when it comes to short periods; however, it does change throughout the day.

To view the chart in different periods, complete the following steps: 1. Click the Dashboard tab.2. From the Time Series window, click the Interval Display dropdown menu.3. Highlight and click the time interval. This changes the view.

Adding a New Chart to the Dashboard 11

You can add a new chart to the Dashboard screen. You can either select the Home tab or create one of your own. To add a chart, complete the following steps:1. Click the Dashboard tab.2. From the Time Series window, click the Add Chart icon. The Add Element

to Workspace dialog box displays.3. Enter the name of the tab in the Dashboard field. The default is Home.4. Select the type of chart from the Element Type dropdown menu. See

Defining Chart Types on page 11-5.5. Enter a label in the Window Label field. The default is what you selected from

the Element Type dropdown menu.6. Select the Save Layout check box to save the layout.7. Click OK.8. Drag and drop the Name of the counters from the Counters window into the

Time Series window. This adds the new chart.

Adding, Saving, and Deleting an Existing Chart 11

Creating reports and saving them for historical purposes is useful as you can compare trends by week, month, or year, depending on the data available.

Adding an Existing Chart

To add an existing chart, complete the following steps:1. Click the Dashboard tab.2. From the Time Series window, click the Add Existing Chart icon.3. Highlight the name of the chart.4. Click OK. This displays the chart in the current window.


Adding, Saving, and Deleting an Existing Chart USING CHARTS

Saving an Existing Chart – First Time

To save an existing chart for the first time, complete the following steps:1. Click the Dashboard tab.2. Right click inside the window that contains the chart.3. Click the Save Chart As. This displays a dialog box.4. Enter chart name. The default name is Time Series.5. Click OK.

Note: This produces the chart that defaults to the lowest level interval. Typically this is the 30-min / 1-min one. It depends on the intervals selected from the Counter in the Automations screen.

Saving an Existing Chart – Modified

To save a chart existing chart that you modified, complete the following steps:1. Click the Dashboard tab.2. Right click inside the window that contains the modified chart.3. Click Save Chart to save the changes made to the chart, or click Save Chart

As to the changes made to a new chart.

Deleting an Existing Chart

To delete an existing chart, complete the following steps:1. Click the Dashboard tab.2. Right click inside the window that contains the chart.3. Click Delete Chart. This deletes the chart from storage. However, the chart is

still on the screen.4. Click Yes to confirm the deletion.

Note: You can also delete the chart using the steps in Saved Formats on page 10-5.

11-14 RELEASE 5.8 REV A01 300-010-377

USING CHARTS Viewing Counters Values

Viewing Counters Values 11

You can view the counters of a particular chart. This shows their values based on the interval selected. That is, if the interval is 30-min / 1-min, then the viewer shows each one-minute bucket for the thirty-minute range.

To view the counters, complete the following steps:1. Click the Dashboard tab.2. Click the Counter View icon from the Time Series window. This creates

the Table Viewer. See Figure 11-9.Figure 11-9 Table Viewer


DETACHING AND MOVING WINDOWS USING CHARTS

Detaching and Moving Windows 11

You can detach the windows from Dashboard and Events screens. This allows you to customize the windows to help you focus on specific items or keep only those items in view that are important.

To detach the screen, complete the following steps:1. Click the Dashboard or Events tab.2. Select the thumbnail icon of the window you want to detach. Figure 11-10

shows an example of removing the Counters window from the Dashboard screen.

Figure 11-10 Detaching a Window

11-16 RELEASE 5.8 REV A01 300-010-377

USING CHARTS DETACHING AND MOVING WINDOWS

3. Place the window inside the new location of the screen by dragging it there. See Figure 11-11. You can move the window outside of the MS Console screen or rearrange it inside the screen.

Figure 11-11 Moving Window inside the MS Console


DETACHING AND MOVING WINDOWS USING CHARTS

4. Release the window where desired. This produces the new Dashboard view. See Figure 11-12.

Figure 11-12 Rearranged Dashboard Screen

11-18 RELEASE 5.8 REV A01 300-010-377

12Chapter
Dialog Boxes and Icons in MS Console 1
Topics in this section:• Introduction• Analytics Run• New DataSet• Run Report• Create an Event Class• Create an Event in a Class• Add Condition• Edit Condition• Add Event• Edit Event• Create a Counter Group• Create a Counter in a Group• Add Counter• Report• Add Element to Workspace• Chart Properties• Select Time Intervals• Columns• Quick Jump• Custom Filters• Streams Icons• Time Series Icons• Report Results Icons• Analytics Results Icons• Saved Formats in the MS Console• Save Filter• Save Event View• Open Event View


INTRODUCTION DIALOG BOXES AND ICONS IN MS CONSOLE

Introduction 1

This section discusses specific procedures pertaining to dialog boxes imbedded in EMC Monitoring Server (MS) Console. It also lists and describes the functions of icons available from different windows in MS Console.

Analytics Run 1

The Analytics Run dialog box lets you select and set up the events you want to analyze from a specified Data Set. This involves selecting the Input Data Sets and Modules. The Data Sets can be in a stream or a data set you previously ran.

Figure 12-1 Analytics Run Dialog Box

12-2 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Analytics Run

The following table describes the fields of the Analytics Run Dialog Box.

Table 12-1 Analytics Run dialog box fields

Field Description

Processing Interval This field indicates the period of the interval for which to conduct the analysis. The clock changes the dates and times. The default shows “All available data,” which means it includes all the dates and times of the stream. To specify these parameters, modify the time interval. The window will display the changes.

To modify the time, click on the Clock icon. The Select Time Interval dialog box displays. See Select Time Intervals on page 12-26.

The Use specified time interval enables you to make changes by clicking its radio button. The default is Use all available data.

MS Console begins its aggregation based on the first instance of data. This means that if the data begins at 00:33:00 AM, and the period length is 1-hour, then the next counter begins at 01:33:00 AM. To start at 00:00:00 AM, select the Start time to include 00:00:00 AM. For more information, see Adding Counters to a stream on page 5-6.

Result Label The field allows you to specify an output name. If selected, the name goes on the end of the timestamp.

Output Type The only option is TimeSeries.

Period Length The default setting for this field is 3600 seconds. This is the value of the module for that time length. For instance, if the MS Console is counting the number of “Errors”, from the first time it sees the event, or based on the time interval selected, at the end of 3600 seconds, then it sums them up based on the length. In the Result Viewer dialog box, each row represents the sum of events based on 3600-second time increments. For more information, see Data Concatenation Types on page 1-2.

Aggregation Level The default setting for this field is 60 seconds. This is the smallest increments of aggregating data into buckets unless specified in the Counters from the Events screen. That is, you can select a length of 60 seconds and get the right results. However, if you select 1-second lengths with 60-second levels, then MS Console calculates the module based on 60-second lengths and 60-second levels. If you select 1-minute lengths with 1-hour levels, then MS Console calculates the module based on 1-hour lengths and levels. For more information, see Data Concatenation Types on page 1-2.

Input Data Sets This field shows the data that you want to analyze. Select the Add Data Set... button to add from the dropdown menu in the New Data Set dialog box. Based on the addition, there can be multiple data sets.


Analytics Run DIALOG BOXES AND ICONS IN MS CONSOLE

Modules This field shows the available modules from the Analytic Modules window. Select multiple modules by selecting the Add Module... button. The Select Module dialog box displays. Highlight the Names of the module and click the OK button.

Options This field allows you to select the Append Timestamp to Label check box, which adds the current timestamp to the Result Label entered.

Table 12-1 Analytics Run dialog box fields

Field Description

12-4 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE New DataSet

New DataSet 12

The New DataSet dialog box is used to select an event counter or an analytics result as a data set for processing or viewing.

To select an event counter, first select the From Counter radio button and select a stream from the Stream dropdown menu. The Counter dropdown menu is populated with all available counters from the selected stream.

After selecting the counter, you have the option of checking Add all counters from matching group. If this option is checked, then all the event counters in the same group as the selected counter are added when you click OK .

Figure 12-2 Single Stream Selected from New DataSet dialog box

When you are finished selecting the event counter, click OK .

To select an analytics result data set, select the From Analytics Output radio button. If you have already run an analytics module, then the Run Label drop down will be populated with the analytics output labels. If you have not run any analytics, then this option will be unavailable.

After selecting the analytics label, the Data Set dropdown will be populated with all the data sets contained within those results. You can select the desired one from the Data Set drop down, then click OK to add the data set. If you want to add multiple data sets, you have to launch the New Data Set dialog box multiple times.


New DataSet DIALOG BOXES AND ICONS IN MS CONSOLE

Figure 12-3 New Data Set

12-6 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE RUN REPORT

Run Report 12

The Run Report dialog box lets you create reports from the Reports screen. It also lets you create reports using the results from the Analytics screen.

MS Console has a variety of charts that you can create. This is what the MS Console refers to as reports. All of them except the Pie Chart include the data’s time series.

The Run Report dialog box has five areas:

• Result Label• Output Type• Module Parameters• Input Data Sets• OptionsIn Result Label, enter the name that you want to give to the label. The default begins with the “Charts –” and appends the name of the chart chosen to it. The Output Type is an Image. In Module Parameters, enter the parameter to pass to the module. The Input Data Sets shows what you selected from the Add Data Set or Add Analytics Data Sets buttons. In the Add Data Set, you can build specific reports. For more information, see Adding Counters to a stream on page 5-6 and Generating Charts/Reports from the Reports Screen -

Table 12-2 Types of charts

Chart Description

Stacked Bar Chart Multiple data sets are stacked together.

Side Bar Chart Multiple data sets are placed next to each other.

Percentage Bar Chart Multiple data sets are stacked together and sized proportionally to sum to 100%.

Stacked Bar with Average

Multiple data sets are stacked together with the average overlaid on top.

Line Chart Line Chart

Time Series Moving Averages

LIne Chart with Moving Averages

Pie Chart Distribution of the events based on the sum of its rates of the interval.

Pareto Chart Type of bar chart where the event totals are arranged in descending order.


RUN REPORT DIALOG BOXES AND ICONS IN MS CONSOLE

From Analytics Output on page 9-4. In the Add Analytics Data Sets, you can use the results of the Analytics section to generate the reports.

Note: You can add multiple Input Data Sets.

The Options lets you add a timestamp to the label. This is useful to keep track of when you created the charts and in the case when the names are the same. The time provides the differentiation between charts.

12-8 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Create an Event Class

Create an Event Class 12

The Create Event Class dialog box allows you to create the events you need to monitor. Typically, you create the class based on some type of requirements, services, systems, or servers and name it in the like fashion. The description reflects what the class is to do. Together, this helps you categorize and keep track of things.

Note: You cannot create an event without creating an Event Class.

The name of the class is also useful when creating the Counters Group. Both should match to make it easier to attach the counters to events. You can lose track of things fast if you do not have some type of naming configuration.

In the Create Event Class dialog box, add the name of the Event Class in Class Name. You can use any character for the name. The Description allows 250 characters to describe the class. Figure 12-4 shows an example of an Event Class and its events. For more information, see Adding an Event Class on page 4-2.

Figure 12-4 Event Class and Events


Create an Event in a Class DIALOG BOXES AND ICONS IN MS CONSOLE

Create an Event in a Class 12

The Create Event dialog box contains three boxes, which help you define what you will track:

• Event Name• Description• Conditions

Note: To edit an event, see Editing Events on page 4-3.

In the Event Name box, enter the name of the event, which should be descriptive or follows the imbedded stream code so that the event name is meaningful for you. For example, if you want to track a certain error, (for instance, lost transaction), then you can use one of the two names: “Error01” or “LostTrans.” The first one can be the level that the developers placed inside the log. The second can be a short description of the event. Both are useful and both give you an idea of what you are looking for.

In the Description box, provide a description of the Event Name. Using the previous example, you can add a description, such as “Count the number of lost transactions.” This describes the “Error01” and “LostTrans” names. Any one is now able to make sense of the event. This is part of the corporate knowledge that the MS Console helps the company build. It takes what others who are experts in an area and records it for later use.

In the Conditions box, define how to count the events. The three condition types available are Text, Expression, and Regex. You can add more than one condition type and all condition types you added show up in the Conditions window. For more information, see Conditions on page 1-7.

12-10 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE ADD CONDITION

Add Condition 12

The Add Condition dialog box lets you create conditions to capture the events that you want from a stream. From the Condition Type dropdown menu, select from Text, Expression, and Regex. You can also add multiple conditions in the same Event Name. After selecting the Condition type, enter the condition in the Value box.

The Text condition finds a specific character, word, or set of words anywhere in the stream. On the other hand, the Expression condition allows you to define events based on the fields of a stream. Lastly, the Regex condition is an advanced way of finding text within a stream. For more information, see Conditions on page 1-7.


Edit Condition DIALOG BOXES AND ICONS IN MS CONSOLE

Edit Condition 12

The Edit Condition lets you edit the conditions so that you can update the information that you want from a stream. You can select from Condition Type and Condition Text. To edit Condition Type, use the dropdown menu to select the type of condition. You can add, edit, or remove the condition. Note that you can have more than one condition. For more information, see Conditions on page 1-7 and Filtering Condition Examples on page 6-6.

12-12 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Add Event

Add Event 12

The Add Event lets you select an event previously created and defined in the Automation section. Attach these events to the stream to count how many times they appear in the stream. However, to count the events, you must add a counter to the event and also create and define what the counter does.

The Name has the name of the Event Class and underneath it the event. To the right is the Description. This provides an explanation of the functions that the events perform. When creating the Event Class and its events, you must provide a description.


Edit Event DIALOG BOXES AND ICONS IN MS CONSOLE

Edit Event 12

The Edit Event dialog box lets you change specifics about the events. You can change the name of the event in the Event Name box. You can modify what it means in the Description box. Any changes made take place right after selecting the OK button.

Another thing possible in this box is to Add, Edit, or Remove the Conditions. Simply use the buttons. In addition, the Type column gives the name of the condition type. The Condition Text column shows what condition or code MS Console interprets. The Move Up and Move Down buttons lets you rearrange the type of conditions as well.

12-14 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Create a Counter Group

Create a Counter Group 12

A Counter Group lets you add the counters, so you can create counters for specific tasks. Create a name of the group that reflects the Event Class name. This makes it easier when adding counters to the events. For more information, see Attaching and Removing Events and Counters from Streams on page 4-6.

Note: You cannot add a counter without adding a group.

In the Create Counter Group dialog box, add the Group Name. You can use any character for the group name. Provide a description of what the group does in Description. You can use up to 250 characters. It is also customary to tie the Description of the group back to the Event Class. Figure 12-5 shows an example of a Counter Group and its counters. For more information on adding groups, see Adding Counter Groups on page 4-4.

Figure 12-5 Counter Group and its Counters


CREATE A COUNTER IN A GROUP DIALOG BOXES AND ICONS IN MS CONSOLE

Create a Counter in a Group 12

The counter counts a single event at a time, based on the event inside the stream matching what you set up in the Events tab.

The Create Counter dialog box has two areas:

• General• OperationThe General area contains the Counter Group, Counter Name, and Counter Type. The Counter Group shows you where the counter will reside. The Counter Name lets you enter the name of the counter. This typically matches the name of the event. Sometimes an extension is useful to add specificity to the counter.

The Operations contains the Initial Value and Frequency and a check box that lets you reset the counter to its initial value at each interval. Initial Value lets you select what initial value to start counting. The default is set to zero. Frequency lets you set how often does the MS Console aggregate the data. The default is 60-seconds.

Note: Any value that goes in Frequency is in seconds. In addition, this is the lowest level the MS Console collects data. It is not possible to collect it in a lower level in the Aggregation Level from the Analytics screen in the Analytics Run dialog box. For more information, see Data Concatenation Types on page 1-2.

The check box under Frequency lets you reset the counter to its initial value at each interval. MS Console sets the default to check. For more information on creating counters, see Adding Counters on page 4-4.

12-16 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Add Counter

Add Counter 12

The Add Counter lets you select a counter previously created and defined in the Automation section. You must attach a counter to an event already attached to a stream. When the event is detected, the counter is updated. The count counts the number of times these events appear in the stream based on how you had set up the counters. This is the initial value and frequency of the counters. It also includes if you selected the counters to reset itself to the initial value at each interval.

The Name has the name of the Counter Group and underneath it the counter. To the right is the Description. This provides an explanation of the functions that the counters perform. When creating the Group and its counters, you must provide a description.

You can add a counter to any stream. MS Console can also count various frequencies within the same stream. In other words, if the intervals are 60 and 300, the MS Console is able to count the events based on the mixed intervals. This gives you greater insight to how the systems are acting. See Create a Counter Group on page 12-15 and Adding Counters on page 4-4 on how to create and add counters.


Report DIALOG BOXES AND ICONS IN MS CONSOLE

Report 12

The Report dialog box allows you to generate a report, which combines running the Analytics Modules with the Chart Modules to produce a report with summary information. From the Reports screen, double click the Name of the report from the Reports folder in the Report Modules window.

Figure 12-6 Report Dialog Box

The title bar of the dialog box shows the type of report you selected. Figure 12-6 shows an example of Severities report.

The Reports dialog box has four areas: • Result Label• Time Selection• Basis Stream• OptionsAdd a name of the report in the Result Label field.

Time selection defines the time interval and aggregation level for the report. It contains two dropdown menus. From the first dropdown menu, select what type of report to run. You can run a report with Daily Summary by Hour, Weekly Summary by Day, or Monthly Summary by Day. The default is Daily Summary by Hour.

From the next dropdown menu of Time Selection, select the time to run the report. The selection depends on what type of report you selected. The default is Today. For example, if you selected Daily Summary by Hour, your options are

12-18 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Report

Today, Yesterday, or select Day. If you selected Weekly Summary by Day, your options are This Week, Last Week, or Selected Week.

Click the Clock icon, which displays a Calendar interface. Select the starting day, week, or month. Note that the Clock icon is enabled only when you want to enter a specific day, week, or month.

From Basis Stream, select the stream to process from the dropdown menu. Basis Stream allows you select a stream, including all child streams. The default stream is the “Monitoring Server” and will include all data.

From Options, select Append timestamp to Label check box to add the current timestamp to your report. If the check box is not selected, any existing report will be replaced. The timestamp enables you to differentiate between two reports.

When you click OK, a report is created in an HTML format, showing a chart with the selected period, one or more summary tables, and a report summary. You can access this report from the Report Results window in the Reports screen.


Add Element to Workspace DIALOG BOXES AND ICONS IN MS CONSOLE

Add Element to Workspace 12

Add Element to Workspace allows you to add a new chart window to the Dashboard screen. Figure 12-7 shows how to add a new chart from the Reports screen.

Figure 12-7 Element Workspace from the Reports screen

shows how to add it from the Dashboard screen. From this dialog box, you can select from one of the two types of chart series from the Element Type dropdown menu.

Figure 12-8 Element Workspace from the Dashboard Screen

The workspace dialog box allows you to select or enter the tab name of the Dashboard. The dropdown arrow shows what is available. The default is Charts from the Reports and Home from the Dashboard screen.

12-20 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Add Element to Workspace

The Element Type has two chart series choices. One is the Time Series Chart. This shows the charts data on the x-axis based on the times. The other is the Time Series with Average Chart. This also shows the time, but creates another time series based on the average of all the data in the chart. MS Console shows this as a shaded area in the chart.

The Window Label box lets you enter a name for the chart window. The default from the Reports is the name of the Label from the Report Results. The other is what is in the Element Type.

Finally, MS Console provides Options to save the layout.


Chart Properties DIALOG BOXES AND ICONS IN MS CONSOLE

Chart Properties 12

The Chart Properties dialog box has three tabs that you can use to configure the charts. They are General, Data, and Appearance.

Figure 12-9 General tab on the Chart Properties Dialog Box

The following table shows the options available from the General tab.

Table 12-3 General Tab Fields

Field Description

Chart Title Enter the chart name. The name goes on top of the chart.

Vertical Title This field contains the event that is on the y-axis as a "per" aggregation scale. The default is Events. For example, if the x-axis interval is five minutes, and you enter Error01 as the event, then the y-axis display "Events / 5-min."

Vertical Scale Enter a Maximum and Minimum scale. This forces the chart to display those levels regardless of the data's range.

12-22 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Chart Properties

The Data tab shows the data interpreted by the chart. See Figure 12-10.

Figure 12-10 Data Tab on the Chart Properties Dialog Box

The following table shows the options available from the Data tab.

Table 12-4 Data Tab Fields

Options Select the check boxes to activate the following options:

• Show Toolbar

• Show Legend

• Vertical Grid Lines

• Horizontal Grid Lines

• Append aggregation level to vertical title

Note: If you remove the toolbar or legend, you can place it back using the right mouse button menu from the Time Series window.

Field Description

Data Sets Stream/Label gives the name of the stream.

Source shows where the data is from. Currently, the data comes from the Counters tab in the Automation screen.

Item shows the group and name of the counter.

Table 12-3 General Tab Fields

Field Description


Chart Properties DIALOG BOXES AND ICONS IN MS CONSOLE

The Appearance tab allows you to customize the chart.

Figure 12-11 Data Tab on the Chart Properties Dialog Box

The following table shows the options available from the Appearance tab.

Table 12-5 Appearance tab options

Field Description

Chart Type Select the chart from the drop down menu. Options are as follows:

• Bar shows data as a bar. If more than one type, MS Console places them next to each other.

• Stacked Bar shows data as a bar. If more than one type, MS Console places them on top of each other.

• Stacked Bar 100% shows data as a bar normalized to 100%. If more than one type, MS Console places them on top of each other keeping 100% integrity.

• Line shows the data as a line series. If more than one type, MS Console plots them on the same chart.

• Area shows the data as a shaded line series. If more than one type, MS Console plots them on the same chart.overlaid on each other.

• Stacked Area shows the data as a shaded line series. If more than one type, MS Console places them on the same chart on top of each other.

12-24 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Chart Properties

Size Select the chart size from the drop down menu. Options are Large, Medium, and Small.

Color Change the Background, Text, and Grid Lines of a chart. The default colors are on the button to the right of the Color dropdown menu.

Options Select the check boxes to activate the following options:

• Swap horizontal/vertical box swaps the horizontal with the vertical lines in the chart.

• 3D Effect box changes the chart to view it in a three dimensional format in solid colors. It converts the chart to a three-dimensional one where the bars or lines are transparent.

• Solid Color box converts the bars and lines to a solid color.

Table 12-5 Appearance tab options

Field Description


Select Time Intervals DIALOG BOXES AND ICONS IN MS CONSOLE

Select Time Intervals 12

The Select Time Intervals dialog box allows you to process specific data that is important for you. This keeps you from having to look through the entire stream. It cuts the noise down and helps improve your efficiency. Figure 12-12 shows the dialog box.

Figure 12-12 Time Interval Dialog Box

The Start box provides a dropdown calendar to make the date selection easier. To its right is the time. You can enter the hour, minute, and second manually or with the up and down arrows. The same goes for the AM and PM. The default date and time is the current date beginning at midnight.

The Start box provides a dropdown calendar to make the date selection easier. To its right is the time. You can enter the hour, minute, and second manually or with the up and down arrows. The same goes for the AM and PM. The default date and time is the current date beginning at midnight.

12-26 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Columns

Columns 12

The Columns dialog box lets you display a set of items to view information about the stream. MS Console displays them in the Streams window of the Dashboard screen or in the Views window of the Events screen.

You can view the columns by selecting the check box next to the name of the column. A check mark means that the MS Console displays it. In addition, you can rearrange the columns by highlighting them and using the Move Up and Move Down buttons. Figure 12-13 from the Streams window shows the StreamID and EventCount selected to display in its window. The highlighted StreamID lets you rearrange it in the order of appearance by using the move buttons. These procedures are the same for the Views window.

Figure 12-13 Stream Column Display Example


Quick Jump DIALOG BOXES AND ICONS IN MS CONSOLE

Quick Jump 12

The QJ (quick jump) key displays the Position Jump dialog box. This lets you move in the Views window from the Events screen effortlessly based on times or dates. Table 12-6 describes the types and functions of jumps available from the Position Jump dialog box.

Table 12-6 Jump types

Jump Description

Relative Jump A Relative Jump moves the events by the Offset. The default is 1 minute. This means that when you use the “[” and “]” shortcut keys, the MS Console moves to the next closes value. That is, if the events have sequential minutes from 0 to 33, and then picks up at 38, when the MS Console is at 33 and you press the “]” key, the MS Console goes to 38.

Note: Changing the Offset stays in effect until you change it or close the stream. To change the Offset, use the dropdown menu next to it. This permits you to select from second, minutes, hours, and days.

Absolute Jump An Absolute Jump moves to the point selected of the stream. You can select the date and time, and the MS Console automatically moves them there. This is useful to narrow the analysis. You can begin where the error or event occurred. Unlike the Relative Jump, you must always select the date and time. It does not stay in memory.

12-28 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Custom Filters

Custom Filters 12

The Custom Filter dialog box shows the Type of conditions and the Value of the condition. Type tells you the type of condition used: Text, Expression, or Regex. For more information, see Conditions on page 1-7. Value shows what condition or code for the MS Console to interpret. For example, the condition severity = 'SEV1' means the MS Console will include every instance of an event containing SEV1 in the severity attribute. Table 12-7 describes the options available from the Custom Filter window.

For more information on filtering, see the following sections:• Adding Filters using Conditions on page 6-3• Saving Filters on page 6-9• Filtering through Columns on page 6-10

Table 12-7 Custom Filter options

Add a filter.

Edit an existing filter.

Remove an existing filter.

Move up an existing filter. This means the MS Console will start with this condition first before it continues with the next one.

Move down an existing filter top. This means the MS Console will start with the previous conditions before it gets to this on one.

Save the existing filter for later use.


Streams Icons DIALOG BOXES AND ICONS IN MS CONSOLE

Streams Icons 12

The Streams window from the Dashboard screen enables you to process the log files. You can import everything from a single stream to file folders. Table 12-8 shows the Streams icons and provides a brief description. For more information, see Streams Window View on page 3-1. For a list of definitions, see Terms and Concepts on page 1-2.

Table 12-8 Streams icons

Icon Description

Stream

Where all streams go. This is the highest level of nesting.

Configure Stream view Column

Set up what to show on the Streams window. This includes everything from the StreamID to the Stream Type. See Configuring Stream View Columns on page 3-2.

12-30 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Time Series Icons

Time Series Icons 12

Use the following icons from the Time Series window to interact with the charts. Figure 12-14 shows most of the available features.

Figure 12-14 Time Series Toolbar

Some Time Series functions that are unavailable from the toolbar. Functions such Save Chart, Save Chart As, Delete Chart, and Refresh are available from the Time Series popup menu as shown in Figure 12-15. Place the mouse over the chart and use the right click button it to bring up the box. For more information, see Interactive Charting on page 11-1.

Table 12-9 Time Series icons

Moves the chart.

Change interval view from larger to smaller time increments.

Change interval view from smaller to larger time increments.

Go to the start of the stream.

Go to the end of the stream.

Select the stream.

Set the view period of the graph.

Configure the chart via the Chart Properties dialog box.

Monitor the events live.

Set length per aggregation of the chart.

Add a new chart window to the Dashboard.

Add an existing chart to the Dashboard.

View the counters of the chart in a table format.


Time Series Icons DIALOG BOXES AND ICONS IN MS CONSOLE

Figure 12-15 Time Series Popup Menu

12-32 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Report Results Icons

Report Results Icons 12

The following is a high-level description of the Report Results icons. For more information, see Report Editing Features on page 9-7.

Table 12-10 Report Results icons

Icon Description

View the reports.

Generate a new report using the existing report.

Add a report to the Dashboard screen.

Start a suspended task.

Stop a running task.

Delete the selected Label.


Analytics Results Icons DIALOG BOXES AND ICONS IN MS CONSOLE

Analytics Results Icons 12

The following is a high-level description of the Analytics Results icons. For more information, see Using the Analytic Results window on page 5-9.

Table 12-11 Analytics Results icons

Icon Description

View the results of the analysis in a table format.

Generate a new analytics output from the same configuration or selected output.

Start a suspended task.

Stop a running task.

Delete the selected Label.

12-34 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Saved Formats in the MS Console

Saved Formats in the MS Console 12

The Saved Formats is a list of formats that you developed and saved when viewing and analyzing the logs of your systems. These formats include Charts, Filters, and Event Views. The Format type dropdown menu provides the lists. The Name window displays the saved formats.

As you begin to view and analyze the logs, you can save the various formats in the defined sections for later use. This makes you more efficient since you do not have to build them again. You can use them with the same log file or different ones. Below are the format types along with where you can find them.

The Delete button deletes the saved format under the Format type. For instance, if there is a chart named SCD, you can delete it by selecting the chart and clicking the Delete button.

Table 12-12 Format Type and Location

Format Type Location

Charts Dashboard Screen in the Time Series Chart window

Filters Events Screen in the Views window under the Custom Filter

Event Views Events Screen in the Views window using the right click button.


Save Filter DIALOG BOXES AND ICONS IN MS CONSOLE

Save Filter 12

The Save Filter allows you to save the filters designed in the Customer Filter dialog box for later use. Specify the name of the filter under the Filter Name. Select the Only show this filter on the following stream check box. This means that this filter is only applicable to the defined stream. MS Console shows it underneath the Only show... statement. However, you can also select a different stream using the dropdown arrow. For instance, if you developed a filter using a specific stream, and the stream is in a stream that has the same type of streams, then you can save the filter under the stream. This means that any of the stream’s children can use the filter. On the other hand, if this check box is not selected, then you can use the filter on any stream.

Note: Just because you can use it in any stream does not mean that it will give the results sought. For example, if the filter created specifies a certain error to display and it is not in the other streams, then the Views window will display a blank screen.

12-36 RELEASE 5.8 REV A01 300-010-377

DIALOG BOXES AND ICONS IN MS CONSOLE Save Event View

Save Event View 12

The Save View allows saving the viewed events in its original format or in a design format based on the number of columns and their width, the number of rows, and any filter developed.

To save the view, specify the name of the view under the View Name. Select the Only show this view on the following stream check box. This means that this view is only applicable to the defined stream. MS Console shows it underneath the Only show... statement. However, it is possible to select a different stream using the dropdown arrow. For instance, if you developed a view using a specific stream, and the stream is in a stream that has the same type of streams, then you can save the view under the stream. This means that any of the stream’s children can use the view. On the other hand, if this check box is not selected, then you can use the view on any stream.

Note: Just because you can use it in any stream does not mean that it will give the results sought. For example, if the view created specifies a certain error, number of rows and columns, and reordering of the rows to display, and it is not in the other streams, then the Views window will display the column headers, but with no data in the rows.


Open Event View DIALOG BOXES AND ICONS IN MS CONSOLE

Open Event View 12

The Open Event View option provides a list of the saved views to see the stream in a specified format. The lists only shows what views are applicable to the selected stream. A different stream can have different views. It depends on how you saved the format. You can save the format specific to a stream. You can also save it where the view is applicable to any stream.

The New View opens the stream in its original format. The Default View opens the stream in the user-specified format. If none is given, then it opens it in its original format. For instance, if you specified one of the saved views as the default, the MS Console will open the view with that format. If you are working on a specific view using various streams, then instead of going through the list of views and selecting the specific view, you can set it as a default. Then as you perform the analysis, you can use the Open Default Event View from the popup menu to select the view. Access this menu option from the Streams window in the Dashboard screen.

Figure 12-16 Streams Popup Menu

12-38 RELEASE 5.8 REV A01 300-010-377

13Chapter
Appendix A: Analytics Functions 1
Topics in this section:• Analytics Functions

Analytics Functions 1

The following table describes the functions you can perform from the Analytics functional area on the EMC Monitoring Server (MS) Console.

Table 13-1 Analytics functions

Name Function Description

Count Count is the frequency within the one period.

MS Console uses Count in various other analytic modules. It is the core of the modules.

The count feature counts the number of times MS Console collects the data. It is the frequency within a period.

Example 1: Assume that the period length is one hour. If MS Console is set to aggregate the data every 60 seconds or 1 minute, the count for one period is 60.

Example 2: Assume that the period length is two hours. If MS Console is set to aggregate the data every 60 seconds or 1 minute, the count for one period is 120.

Example 3: Assume that the period length is two hours. If MS Console is set to aggregate the data every 15 seconds, the count for one period is 480.


ANALYTICS FUNCTIONS APPENDIX A: ANALYTICS FUNCTIONS

Maximum (Max)

Maximum is the greatest value of a set of events over a defined range.

The maximum feature is the greatest value of a set of events over a defined range. That is, it is the largest number in a set of ranges where the range can include items such as events over a period, or a set of servers and services. The maximum does not care how many times that large number occurred within the range.

Example 1: Assume E represents an event and the number attached to it represents the type of event. Then Day 1 = E1, E1, E1, E1, E1, Day 2 = E1, E1, E1, and Day 3 E1, E1, E1, E1 ==> Day 1 E1 = 5, Day 2 E1 = 3, and Day 3 E1 = 4 ==> for all three days E1 = 5, 3, 4 ==> E1 = 5.

Example 2: E1 =1, 1, 3, 4, 5, 6, 6, 6 ==> E1 = 6.

Use the maximum feature to determine what event based on a server, service, or combinations of, have had the largest number of occurrences over a period or set.

For example, you can determine what day or days have the most number of events occurring. Use this to delve further into why this is occurring. Is it the number of transactions that occurred that day or is it something else? In addition, you can dig deeper into the analysis in terms of servers and services. You can determine if the maximums are from the same server or service. If so, then why? You can also compare the maximums against each other. Are they significantly different in value? If so, then why?

As another example, you can determine what server or service has the most number of events. This is useful for targeting servers or services and investigating further into the causes of these large numbers of events.



13-2 RELEASE 5.8 REV A01 300-010-377

APPENDIX A: ANALYTICS FUNCTIONS ANALYTICS FUNCTIONS

Mean Mean is the average number of events.

The mean feature is the average number of events. It is one way of measuring central tendency. It is a count of the number of events classified by the user over a period, or for a specific set of servers or services, or a single server or service, all defined as n, that equals the count divided by n. These events could be specific, categorized, a count of every event, or any combination of them.

Example 1: Assume E represents an event and the number attached to it represents the type of event. Then Day 1 = E1, E2, E1, E1, E2, E1, E2, E1, and Day 2 = E1, E1, E2, E1, E2, and Day 3 E1, E2, E1, E1, E2, E1, E2 ==> E1 = 12/3 = 4.00 and E2 = 8/3 = 2.68.

Example 2: If E1 = 12, E2 = 8, E3 = 10, and E4 = 6, then the average number of events is (12 + 8 + 10 + 6)/4 = 9.00.

Use the mean feature to view event changes over a range or set of ranges in order to get an overall perspective. Select multiple days, times, services, or servers.

The mean feature provides you the insight to a specific application, server, or service based on the average number of events generated. It tells you how much central tendency there was before any modifications were made and how much there was after they were made. It helps you see what changes might have affected the server, service, or overall system.

For example, you can calculate the average number of events per day over a month. When a modification occurs to one of the applications, servers, or services, you can determine the new average number of events per month. You can then compare the average number of events before and after the changes and act accordingly. This scenario is also applicable based on the average number of events by service, server, time, or any combination of them. For example, you can determine the average number of events from servers x during period t.

As another example, you can determine the average events for a period and compare them to the averages of the same event for various periods. This is useful for learning how the system may have evolved from changes to the service offerings, number of users, or any combination of them.





Median Median is the middle value of an event over a defined range.

The median feature is the middle value of an event over a defined range. It is the number that separates the higher half of a sample, from the lower half. It is also one way of measuring the central tendency of the events and is less sensitive to extreme scores. Define the period, and the value type, that is the sum or average, of the events.

Note: If there is an even number of events, then the median is the average of the two middle events.

Example 1: Assume E represents an event and the number attached to it represents the type of event. Then Day 1 = E1, E1, E1, E1, E1, Day 2 = E1, E1, E1, and Day 3 E1, E1, E1, E1, ==> Day 1 E1 = 5, Day 2 E1 = 3, and Day 3 E1 = 4 ==> for all three days E1 = 5, 3, 4 ==> E1 = 5, 4, 3 ==> E1 = 4.

Example 2: Day 1 E2 = 3, Day 2 E2 = 2, and Day 3 E2 = 3 ==> E2 = 3, 2, 3 ==> E2 = 3, 3, 2 ==> E2 = 3.

Example 3: Day 1 E1 = 25, Day 2 E1 = 3, Day 3 E1 = 4, and Day 4 E1 = 5 ==> E1 = 25, 3, 4, 5 ==> E1 = 25, 5, 4, 3 ==> E1 = (5 + 4)/2 = 4.50. Notice that 25 has no bearing on the median only that it is a placeholder. Any number in place of 25 gives the same result.

Example 4: E1 = 6, 6, 5, 5, 4, 3 = (5 + 5)/2 = 5.00.

Use the median feature to view the event that is located in the middle between all events. This helps you see things from a different perspective without influences from extreme values.

For example, you can determine the median number of events per day over a month. This shows the middle number of events avoiding extremes event cases in either direction. That is, days with very high or low event counts do not affect the results tremendously. You can also determine the median number of events by server, service, time, or any combination of them.

As another example, if there is a new service added, and you notice that there are changes to the average events generated, but the median is the same. That is, the new service affects the system for the first few days and it shows in the average. However, with the median it will not show up until later if the wrinkles have not been straighten. If fixed, this gives you additional clarification that the system had not changed significantly and as a result prevents any unnecessary actions.



13-4 RELEASE 5.8 REV A01 300-010-377


Minimum Minimum is the least value of a set of events over a defined range.

The minimum feature is the least value of a set of events over a defined range. That is, it is the smallest number in a set of ranges where the range can include items such as events over a period, or a set of servers and services. The minimum does not care how many times that small number occurred within the range.

Example 1: Assume E represents an event and the number attached to it represents the type of event. Then Day 1 = E1, E1, E1, E1, E1, Day 2 = E1, E1, E1, and Day 3 E1, E1, E1, E1 ==> Day 1 E1 = 5, Day 2 E1 = 3, and Day 3 E1 = 4 ==> for all three days E1 = 5, 3, 4 ==> E1 = 3.

Example 2: E1 =1, 1, 1, 3, 4, 5, 5, 6 ==> E1 = 1.

Use the minimum feature to determine what event based on a server, service, or combinations of, have had the least number of occurrences over a period or set.

For example, you can determine what day or days have the least number of events occurring. Use this to delve further into why this is occurring. Is it the number of transactions that occurred that day or is it something else? In addition, you can dig deeper into the analysis in terms of servers and services. You can determine if the minimums are from the same server or service. If so, then why? You can also compare the minimums against each other. Are they significantly different in value? If so, then why?

As another example, you can determine what server or service has the least number of events. This is useful for learning what makes these servers or services have so little events occur.





Mode Mode is the most frequently occurring event or value of an event.

The mode feature is the most frequently occurring event or value of an event. That is, the event that shows up the most over a defined range. You can define the range as time, or set of events, servers, services, or any combination of them.

Note: There may be more than one mode and there may be none.

Example 1: Assume E represents an event and the number attached to it represents the type of event. Then, Day 1 = E1, E1, E1, E1, E1, Day 2 = E1, E1, E1, and Day 3 E1, E1, E1, E1, E1 ==> Day 1 E1 = 5, Day 2 E1 = 3, and Day 3 E1 = 5 ==> for all three days E1 = 5, 3, 5 ==> E1 = 5.

Example 2: E1 =1, 2, 3, 4, 5, 5, 6 ==> E1 = 5.

Example 3: E1 =1, 1, 1, 1, 5, 5, 5 ==> E1 = 1.

Example 4: E1 =1, 2, 2, 4, 5, 5, 6 ==> E1 = 2, 5 (bimodal).

Example 5: E1 =1, 2, 3, 4, 5, 6 ==> E1 = N/A (no mode).

Use the mode feature to determine the most occurring event or if there is a most occurring event. Base it over a range of time, or a set of servers and services, or any combination of them. This gives you an idea of the amount of influence a particular item may have on an event.

For example, you can determine what event has occurred the most over a period. This provides insight to perhaps a server or service that is generating these events because of updates, additions, or usage. You can then take the appropriate action based on the results.

As another example, if there is an increase in traffic on a server A, and you notice that out of all the servers, server B is now the one with the most events. This was not the case prior to the increase in traffic on server A. Hence, you can investigate further into the interdependencies of server A and B.



13-6 RELEASE 5.8 REV A01 300-010-377


Quartile - Lower (LQ)

The lower quartile is the bottom 25th percentile number of events.

The lower quartile (LQ or Q1) is the bottom 25th percentile of the population of events. In other words, it is outside of the populations' top 75th percentile. These events come up the least in their population.

Note: MS Console use the Moore and McCabe, sometimes referred to as “M-and-M”, to determine the quartiles. This method does not include the median in either half of the UQ or LQ.

Example 1: Assume E represents an event and the number attached to it represents the type of event. Then Day 1 = E1, E1, E1, E1, E1, Day 2 = E1, E1, E1, Day 3 E1, E1, E1, E1, Day 4 E1, E1, E1, E1, E1, E1, and Day 5 E1, E1, E1, E1, E1, E1, E1 ==> Day 1 E1 = 5, Day 2 E1 = 3, Day 3 E1 = 4, Day 4 E1 = 6, and Day 5 E1 = 7. For all five days E1 = 5, 3, 4, 6, 5 ==> {3, 4, 5, 6, 7}. The LQ is the median of the bottom half of events: {3, 4}.

Note: MS Console does not include the median {5} as per the M-and-M method. Thus, LQ = (3 + 4)/2 = 3.5.

Example 2: Given E1 = {1, 2, 3, 4, 5, 6, 7, 8}. LQ = is the median of the bottom half of events: {1, 2, 3, 4}. Thus, LQ = (2 + 3)/2 = 2.5.

Example 3: Given E1 = {1, 2, 3, 4, 5, 6, 7, 8, 9}. LQ = is the median of the bottom half of events: {1, 2, 3, 4}. Thus, LQ = (2 + 3 )/2 = 2.5.

Example 4: Given E1 = {1, 2, 3, 4, 5, 6, 7, 8, 9, 10}. LQ = 3.





Quartile - Upper (UQ)

The upper quartile is the top 25th percentile number of events.

The upper quartile (UQ or Q3) is the top 25th percentile of the population of events. That is, it is outside of the populations' bottom 75th percentile. These events show up the most based on their population.

Note: MS Console use the Moore and McCabe, sometimes referred to as "M-and-M", to determine the quartiles. This method does not include the median in either half of the UQ or LQ.

Example 1: Assume E represents an event and the number attached to it represents the type of event. Then Day 1 = E1, E1, E1, E1, E1, Day 2 = E1, E1, E1, Day 3 E1, E1, E1, E1, Day 4 E1, E1, E1, E1, E1, E1, and Day 5 E1, E1, E1, E1, E1, E1, E1 ==> Day 1 E1 = 5, Day 2 E1 = 3, Day 3 E1 = 4, Day 4 E1 = 6, and Day 5 E1 = 7. For all five days E1 = 5, 3, 4, 6, 5 ==> {3, 4, 5, 6, 7}. The UQ is the median of the top half of events: {6, 7}.

Note: MS Console does not include the median {5} as per the M-and-M method. Thus, UQ = (6 + 7)/2 = 5.5.

Example 2: Given E1 = {1, 2, 3, 4, 5, 6, 7, 8}. UQ = is the median of the top half of events: {5, 6, 7, 8}. Thus, UQ = (6 + 7)/2 = 6.5.

Example 3: Given E1 = {1, 2, 3, 4, 5, 6, 7, 8, 9}. UQ = is the median of the top half of events: {6, 7, 8, 9}. Thus, UQ = (7 + 8)/2 = 7.5.

Example 4: Given E1 = {1, 2, 3, 4, 5, 6, 7, 8, 9, 10}. UQ = 8.

Example 5: Given E1 = {1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11}. UQ=9.

Standard Deviation

Standard deviation is the amount of variability from the mean.

Standard deviation is the amount of variability that the events taken as a whole fall either above or below the mean of the events. That is, it is the amount of spread expressed in the original units. It is the square root of the variance.



13-8 RELEASE 5.8 REV A01 300-010-377


Sum Sum is a total number of events.

The sum feature is a total number of events. It is a count of the number of events that you define. These events could be specific or categorized by server, service or time, or an overall count of every event.

Example 1: Assume E represents an event and the number attached to it represents the type of event. Then, E1, E2, E1, E1, E3, E2, E3, E1, E2, E1 ==> E1 = 5, E2 = 3, E3 = 2.

Example 2: If E1 = 5, E2 = 3, E3 = 2, then the total number of events is E1 + E2 + E3 = 10.

Example 3: If Day 1 E1 = 5, Day 2 E1 = 3, Day 3 E1 = 2, Day 4 E1 = 3, and Day 5 E1 = 6, then the total number of events for days 1 through 5 is 5 + 3 + 2+ 3 + 6 = 19.

Use the sum feature to pinpoint specific periods of event changes. Select a single day or specific time, or a range of days or times.

The sum feature provides you insight to a specific application, server, or service based on the number of events generated. It tells you how many events were present before any modifications took place, and how many there were after the deployment. It helps you understand not only what changes might have affected these items, but the overall system as well.

For example, due to modification to a server, you test the server and then deploy the server. The modifications did not affect the server; however, it did affect the system. After using the sum feature, you noticed that the total number of errors of the system increased. This knowledge can help you determine which server or service was affected the most and take the necessary actions. This may require getting the decision maker involved where this person studies the changes and their effects to the overall system. The decision maker would then review these findings with the appropriate functions for further action.

As another example, you can use the sum feature to compare the results to the results of the same event for specific days. This is useful for learning how the system may have evolved from changes to the service offerings, number of users, or any combination of them.





13-10 RELEASE 5.8 REV A01 300-010-377

14Chapter
Appendix B: Troubleshooting 1
Topics in this section:• Troubleshooting Scenarios

Troubleshooting Scenarios 1

The following table describes some of the troubleshooting scenarios and their solutions.


Scenario Description and Solution

Analysis and or Charts not beginning at 12:00 AM - 00:00:00 AM

If the charts and results do not begin at 00:00:00 AM, modify the time interval to include it. From the Select Time Interval dialog box, usually invoked by the clock icon, select the “Use specified time interval” check box and move the start time to 00:00:00. To “Select from Time Interval...” see Adding Counters to a stream on page 5-6.

Counters not Aggregating Correctly

If the counters are not aggregating properly, check to make sure that the levels of aggregation are correct. The Interval is the lowest level, followed by the Aggregation Level and finally Period Length. Thus, I ≤ A≤P.

MS Console is running slow

If MS Console is running slow, check the Interval counters. If it is set at 1-second versus the 60-second default, then this slows down MS Console. The performance could also be a result of the amount of data MS Console is trying to read.

Cannot use smaller intervals to view chart in Time Series window from the Dashboard screen

Counters:

If wanting to use smaller intervals in the Time Series window to conduct analysis, and are not able to select them from the Interval dropdown menu, make sure that the counter interval in the Automation section is set to 60-seconds.

Summary statistics not shown

If MS Console does not show the Summary statistics in the Result Viewer from the Analytics Results window, make sure that the Label includes the Stats BasicStat module.


TROUBLESHOOTING SCENARIOS APPENDIX B: TROUBLESHOOTING

Pie Chart not adding all the events from a stream broken up by periods

To view the events by period in a Pie Chart, make sure to change the interval period in the Analytics Modules to match the level of data needed. For example, if the stream is five days long, and you want to see the event by day, then select the interval as 1-day and process the stream.


Scenario Description and Solution

14-2 RELEASE 5.8 REV A01 300-010-377

Index 1

AAcquisition Queue

condition events 73event types 71

Adapterevent types 71

AddingAnalytics 511Charts to Dashboard 98, 1113Data Sets 1110Existing Charts 1113

Analytic Results 59Analytics

Count 51Maximum 51Mean 52Median 52Min 52Mode 52Standard Dev. 53Stats 53Sum 53

Analyzing EventsCopy to Clip Board 613Filtering Columns 610Quick Jump 611

application monitorevents 75

CChart Appearance

Change Views 1113Chart 3D Effect 1111Chart Background Color 1111Chart Horizontal View 1111Chart Text Color 1111Chart Type 1111Chart Vertical View 1111

Resize Type 1111Chart Properties

Grid Lines 119Insert Aggregation Level 119Legend 119Toolbar 119

ChartsStart Processing 98Stop Processing 99

Charts, CreateAdd Existing 1113from Analytics Output 94, 95from Analytics Section 94from Counter 92from Current Charts 98in Dashboard 98, 1113

Charts, SavingExisting Modified 1114Existing, 1st Time 1114

ColumnsSizing in the Views Window 610

Containers, Streams, & FilesEvents 26Streams 26

Corporate Knowledge 1210

DDashboard 23Definition of

Class 15Deleting

Analytics 512Charts 1114Charts or Reports 99Counter Groups 45, 46Event Classes 43, 44Event Views 615Filter 69Modules 58

EMC IONIX IT AUTOMATOR MONITORING SERVER CONSOLE USER GUIDE I-1

EEditing

Event Classes 43, 44Events 26

Saving the View 615

IInteractive Charting

Charts Types 115End of Stream 118Popup Menu 112, 1232Start of Stream 117Stream Selection View 118Stream Time Intervals 118Time Series Avg. 116Toolbar Features 1231Zoom 117

LLevels of Aggregating Data

Aggregation Level 14, 55Interval 15Period Length 15

MMonitoring

Counters 82MS Console Screens Chart 212

PPerformance Counters 102

RRemoving Events

File Streams 48

SSettings

About 106Aggregation/Period 102Date/Time 104Enable Diagnostics 102Events per Page 103, 104Event-View Display 103Memory Events 104QJ Key Amount 104Splash Screen 102

Shortcut Keys 65

TTime Interval 55Time Series Tab 510

VView

Counters 1115Counters from Chart 114Reports 97

WWindows

Appearance Chart Prop. 1111Data Chart Prop. 1110Detach 1116General Chart Prop. 119Moving 1116Time Series 111, 112, 1231

I-2 RELEASE 5.8 REV A01 300-010-377

Backcover

EMC CorporationCorporate Headquarters, Hopkin, MA 01748-9103U.S.A.

Tel.:1-508-435-1000

http://www.EMC.com

EMC Ionix IT AutomatorMonitoring ServerConsole User Guide

Document number: 300-010-377Version 5.8REV A01Date: D ecember 2009

Printed in the United States of America.Copyright © 2009, EMC Corporation All Rights Reserved

Dell · Table 1-1 Terms associated with Aggregation Term Definition Aggregation Level This...

Documents

Transcript of Dell · Table 1-1 Terms associated with Aggregation Term Definition Aggregation Level This...