gecco: Constraint-driven Abstraction of Low-level Event Logs
Using Event Viewer Event Levels Creating Custom Views Windows Logs Monitoring Performance.
-
Upload
harvey-bruce -
Category
Documents
-
view
232 -
download
0
Transcript of Using Event Viewer Event Levels Creating Custom Views Windows Logs Monitoring Performance.
• You can double click on any event in the center pane
• Provides important details for troubleshooting purposes– Source– Event ID– User
• Event Levels• Information events—indicates a change has
occurred or describe a successful completion of an operation
• Critical events—is an event that an application or component cannot automatically recover from
• Error events—indicate a problem has occurred external to the application that might impact functionality
• Not a new feature in 2008• Does allow to save custom views which is a
new feature• Some custom views are created automatically– Server roles—each time you add a server role, a
custom view is created– Administrative events—shows critical, error and
warning events from all administrative logs
• Application—logs events from applications.• Security—displays all audited events. Events
include file auditing (who is accessing the file), logon events and other objects.
• System—logs events related to the operating system. A service not starting would be logged to the system event log
• Monitoring tools:– Performance Monitor—uses objects and counters
to monitor performance– Resource Monitor—constantly running and
capturing counters on the core four resources of your system.• Processor• Memory• Disk subsystem• Network Interface