Novell SENTINEL LOG MANAGER 1.0.0.5 - 03-31-2010, Руководство администратора

Страница: 75 / 168

Searching
5
75
no
vd
ocx
(e
n)
19
Fe
bru
a
ry
20
10
5
Searching
Novell
®
Sentinel
TM
Log Manager can perform a search on events. Each time you perform a search
for an event, a tab opens with the search results. In each tab you can again refine your search.
The search includes all the online data currently in the flat files at the
data
directory and the
archived data in zip format at the configured location; and can also include searching of internal
events of Sentinel Log Manager if you select
Include System Events . By default, events are returned
in a loosely time sorted order in reverse chronological order. This sort order relates to how the
events are stored in the file system partitions.
Basic event information includes event name, source, time, severity, information about the initiator
(represented by an arrow icon), and information about the target (represented by a bull’s-eye icon).
This section gives you an understanding of searching for an event, refining search results, viewing
search results, exporting the search results, saving a search query as report template, and sending the
search results to an action instance.
Š
Section 5.1, “Running an Event Search,” on page 75
Š
Section 5.2, “Refining Search Results,” on page 78
Š
Section 5.3, “Viewing Search Results,” on page 82
Š
Section 5.4, “Exporting Search Results,” on page 86
Š
Section 5.5, “Saving a Search Query as a Report Template,” on page 88
Š
Section 5.6, “Sending Search Results to an Action,” on page 90
5.1 Running an Event Search
Users can run simple or advanced searches.
Š
Section 5.1.1, “Running a Basic Search,” on page 75
Š
Section 5.1.2, “Running an Advanced Search,” on page 77
Š
Section 5.1.3, “Search Expression History,” on page 78
5.1.1 Running a Basic Search
A basic search runs against all of the event fields listed in Table C-1 on page 149 . Few basic
searches include the following event values:
Š
root
Š
127.0.0.1
Š
Lock*
Š
driverset0