Tivoli Management Solution for Microsoft SQL. Event Monitoring. Version 1.1

Transcription

1 Tivoli Management Solution for Microsoft SQL Event Monitoring Version 1.1

2

3 Tivoli Management Solution for Microsoft SQL Event Monitoring Version 1.1

4 Tivoli Management Solution for Microsoft SQL Copyright Notice Copyright IBM Corporation 2000 All rights reserved. May only be used pursuant to a Tivoli Systems Software License Agreement, an IBM Software License Agreement, or Addendum for Tivoli Products to IBM Customer or License Agreement. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual, or otherwise, without prior written permission of IBM Corporation. IBM Corporation grants you limited permission to make hardcopy or other reproductions of any machine-readable documentation for your own use, provided that each such reproduction shall carry the IBM Corporation copyright notice. No other rights under copyright are granted without prior written permission of IBM Corporation. The document is not intended for production and is furnished as is without warranty of any kind. All warranties on this document are hereby disclaimed, including the warranties of merchantability and fitness for a particular purpose. U.S. Government Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corporation. Trademarks IBM, the IBM logo, Tivoli, the Tivoli logo, AIX, Cross-Site, NetView, OS/2, Planet Tivoli, RS/6000, Tivoli Certified, Tivoli Enterprise, Tivoli Ready, and TME are trademarks or registered trademarks of International Business Machines Corporation or Tivoli Systems Inc. in the United States, other countries, or both. Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both. UNIX is a registered trademark of The Open Group in the United States and other countries. Other company, product, and service names may be trademarks or service marks of others. Notices References in this publication to Tivoli Systems or IBM products, programs, or services do not imply that they will be available in all countries in which Tivoli Systems or IBM operates. Any reference to these products, programs, or services is not intended to imply that only Tivoli Systems or IBM products, programs, or services can be used. Subject to valid intellectual property or other legally protectable right of Tivoli Systems or IBM, any functionally equivalent product, program, or service can be used instead of the referenced product, program, or service. The evaluation and verification of operation in conjunction with other products, except those expressly designated by Tivoli Systems or IBM, are the responsibility of the user. Tivoli Systems or IBM may have patents or pending patent applications covering subject matter in this document. The furnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, to the IBM Director of Licensing, IBM Corporation, North Castle Drive, Armonk, New York , U.S.A.

5 Contents Chapter 1. Getting Started Tivoli Event Databases Collecting Events to an Event Database Opening an Event Monitor Database Closing an Event Monitor Database Event Monitor Views Event Monitor Definitions Opening an Event Monitor Definition Saving an Event Monitor Definition Chapter 2. Using the Graphical Features of the Event Monitor Working with the Event Monitor Window Tool Tips Left and Right Mouse Buttons Dragging Moving the Main Window Resizing the Main Window Resizing the Event List and Detail Pane Changing the Width of Event List Column Headers Changing the Order of Event List Column Headers Chapter 3. Menus Pull Down Menu Charts File Menu Monitor Menu View Menu Event Menu Detail Menu Tools Menu Help Menu Right Mouse Button Menus Pop Up Menu for View Button Pop Up Menu for Event Column Header Pop Up Menu for Event Pop Up Menu for Detail Pane Chapter 4. Dialog Boxes Filtering Dialog Box Universe Strings Filter Dialog Box - Computer Tab Filter Dialog Box - Days/Time Tab Filter Dialog Box - EventType/Class Tab Filter Dialog Box - Severity Tab Filter Dialog Box - Description Tab Filter Dialog Box - Fix/Acknowledge Tab Filter Dialog Box - Advanced Tab Show Fields Dialog Box Sort Dialog Box Choose View Icon Dialog Box Add View Icon Dialog Box Format Severity Dialog Box Choose Severity Icon Dialog Box Add Severity Icon Dialog Box Alert Severities Dialog Box Alert Sounds Dialog Box Choose Severity Level Sound Dialog Box Update Progress Dialog Box Complete Fix Dialog Box Chapter 5. Working With the Event Monitor Managing Event Monitor Definitions Managing Views Managing Events Event Filters Event Read Status Event Acknowledge Status Event Fix Status Detail Pane Alerts Options iii

6 iv Tivoli Management Solution for Microsoft SQL: Event Monitoring

7 Chapter 1. Getting Started Tivoli Event Databases The Tivoli Event Monitor is used to view and monitor events stored in a Tivoli event database. Each computer running Tivoli Management Solution for Microsoft SQL has a local Tivoli event database where the events generated by that computer are stored. When Tivoli Management Solution for Microsoft SQL is installed a Microsoft Jet ODBC (Open DataBase Connectivity) database with the DSN (Data Source Name) of RoboMon Event Database is created for this purpose. Tivoli provides files to assist the user in converting from Microsoft Jet to SQL Server if that is desired. The Tivoli Event Monitor can view and monitor events from any appropriate ODBC database. Collecting Events to an Event Database The local Tivoli event database collects events that are forwarded from other computers in addition to those generated locally. The database is also used to temporarily store events to be forwarded if the target machine is not available to receive those events. Use the Event Server Configuration program, documented elsewhere, to configure the collection of events of interest from computers of interest into one Tivoli event database. Opening an Event Monitor Database The ODBC database with the DSN of RoboMon Event Database is opened the first time a user runs the Tivoli Event Monitor. The DSN of the current event database is stored when the user exits the Tivoli Event Monitor and retrieved when that user restarts the program (unless Save Setting on Exit has been turned off). Advanced users can create additional ODBC DSNs with the ODBC applet in the Windows NT Control Panel. Generally you would do this to view a Tivoli event database on another computer. In this case you would probably want to uncheck Mark As Read under Option in the Tools menu so you won t inadvertently mark events as read in someone else s database. When multiple event database DSNs exist use File Open DSN to choose the desired database. Once a DSN has been opened you can also use the MRU (Most Recently Used) list under File on the menu. Closing an Event Monitor Database The currently open event database is automatically closed when you exit the Tivoli Event Monitor or open another event database. 1

8 Event Monitor Views Table 1. Tivoli Event Monitor Views A view determines which events from an event database will be displayed, what data fields for those events will be shown, and how the view of the events will be sorted. The following views are provided with the Tivoli Event Monitor. Each view is shown with the default icon associated with the view. Open problems. Tivoli events of Type P (problem) and SubType N (new) or U (updated) with a FixedState of N (not) or A (acknowledged). Work in progress. Tivoli events of Type P (problem) and SubType N (new) or U (updated) with a FixedState of P (progress) or F (fixed). Closed problems. Tivoli events of Type P (problem) and SubType C (closed). Tivoli messages. Tivoli events of Type M (message) and SubType R. Tivoli SNMP traps. SNMP trap events of Type M (message) and SubType S (SNMP) which were generated by Tivoli Management Solution for Microsoft SQL. Windows NT application messages. Windows NT application events of Type M (message) and SubType E (event) with a Class of Application. Windows NT security messages. Windows NT application events of Type M (message) and SubType E (event) with a Class of Security. Windows NT system messages. Windows NT application events of Type M (message) and SubType E (event) with a Class of System. Other SNMP traps. SNMP trap events of Type M (message) and SubType S (SNMP) which were not generated by Tivoli Management Solution for Microsoft SQL. OPCOM security messages. OPCOM events of Type M (message) and SubType O (OPCOM) with a Class of Security. OPCOM system messages. OPCOM events of Type M (message) and SubType O (OPCOM) with a Class of System. Event Monitor Definitions See Managing Views on page 23 for information on how to modify or make a view. One or more views are collected together to form an event monitor definition. The icons for the views form the monitor definition tool bar. The following monitor definitions are provided with the Tivoli Event Monitor. Each monitor definition is shown with the tool bar associated with the definition. 2 Tivoli Management Solution for Microsoft SQL: Event Monitoring

9 All Events. All Windows NT event views. This is the default monitor definition. OPCOM Events. Only the VMS/Unix OPCOM event views. All Events With OPCOM. All Windows NT event views as well as the VMS/Unix OPCOM event views. SNMP. Only SNMP event views. Windows NT Event Log. Only the Windows NT event log event views. Automation, Exchange, and SQL Server. Only the Tivoli event views. Restricted to Automation (Class Automation ), Exchange (Class Exchange ), and SQL Server (Class SQLServer ) respectively. These monitor definitions can be easily copied and modified to create a new definition for other Tivoli solutions. See Managing Event Monitor Definitions on page 23 for information on how to modify or make a monitor definition. Opening an Event Monitor Definition The All Events monitor definition is opened the first time a user runs the Tivoli Event Monitor. The name of the current monitor definition is stored when the user exits the Tivoli Event Monitor and retrieved when that user restarts the program (unless Save Setting on Exit has been turned off). To change the currently loaded monitor definition use Monitor Open. Note that the caption of the Tivoli Event Monitor window always reflects the currently loaded event monitor definition and open event database as well as indicating the computer on which the event database is located. Chapter 1. Getting Started 3

10 Saving an Event Monitor Definition If you change an event monitor definition you can use Monitor Save or Monitor Save As to save the definition for later use. If you use Monitor Save As the name of your current definition will be changed to the name of the new definition. 4 Tivoli Management Solution for Microsoft SQL: Event Monitoring

11 Chapter 2. Using the Graphical Features of the Event Monitor This screen shot illustrates the graphical elements of the main window. v v v v v v v The top line is called the caption. The text includes the name of the current monitor (All Events), the DSN of the event database (Tivoli Event Database), and the name of the computer hosting the event database (WJ). The next line is called the menu. For further details see the Menu section of this documentation. The view label is below the menu. The text includes the current view (Open Problems). Enterprise indicates that the entire database is being viewed. This text changes when a temporary event filter is invoked. The view buttons are below the view label. Note that the left most button is depressed. This is the current view (Open Problems). Also note that three buttons have a red box. This is called an alert and indicates that these views contain alert events. The event list for the current view is below the view buttons. There are column headers on the top of the event list. Horizontal and vertical scroll bars appear below and to the right of the event list if they are needed. The detail pane is displayed below the event list with a horizontal splitter bar separating them. The splitter bar is used to adjust the relative sizes of the event list and the detail pane. There is a set of detail buttons at the top of the detail pane. Horizontal and vertical scroll bars appear below and to the right of the detail pane. There is a status bar at the bottom of the main window. The left panel indicates status, the middle panel indicates the number of events in the event list, and the right panel indicates the date and time at which an event was added to any view. When the status is anything other than Ready this indicates that the 5

12 event monitor is busy with the indicated activity. You will also see an hour glass rather than a normal mouse pointer at these times. Working with the Event Monitor Window Tool Tips A tool tip is text that appears under the mouse cursor when you leave the mouse pointer stationary over certain objects in a window. For example, each of the view buttons has a tool tip that is the name of the view. Left and Right Mouse Buttons The proper terminology for the mouse buttons is primary and secondary. The default mouse configuration (see Mouse in the Windows Control Panel) assigns the left mouse button as the primary mouse button and the right mouse button as the secondary mouse button. Because this default is rarely changed it is common to refer to the mouse buttons as left and right rather than as primary and secondary. Consequently when we say left mouse button, we actually mean the primary mouse button and when we say right mouse button, we actually mean the secondary mouse button. Dragging Dragging is when you click and hold the left mouse button, move the mouse to a new location, and then release the mouse button. Moving the Main Window In order to move the main window drag the caption to the desired location. Resizing the Main Window In order to resize the main window drag any of the four edges to the desired location. You can also drag the lower right corner of the status bar which is called the sizing grip. Resizing the Event List and Detail Pane Drag the horizontal splitter bar to the desired position to change how the main window is divided between the event list and the detail pane. Changing the Width of Event List Column Headers Each column header has a divider at its right-hand edge. Drag the divider to change the width of a column. You can even hide a column by dragging the divider all the way to the left. Double-click on the divider to automatically set the column width. Due to a bug in the Microsoft control the resulting column may be too narrow if there is bold text. Certain column widths, such as the severity icon, cannot be changed. Changing the Order of Event List Column Headers Drag the column header to the desired location. 6 Tivoli Management Solution for Microsoft SQL: Event Monitoring

13 Chapter 3. Menus Pull Down Menu Charts File Menu The following is the structure of the Tivoli Event Monitor pull down menus: Table 2. File Menu Menu Item Menu Subitem Operation Open DSN Opens an event database from a cascade menu of available event databases. Refresh DSN List Refreshes the cascade menu of available event databases. (numbered DSN list) Opens the selected event database. Exit Exits the Tivoli Event Monitor. Monitor Menu Table 3. Monitor Menu Menu Item Menu Subitem Operation New... Creates a new monitor with a single view. Open Opens a monitor from a cascade list of available monitors. Save Saves the current monitor. Save As... Saves a copy of the current monitor with a new name. Filter... Opens the Filter dialog box for the current monitor. Propagate Event Days Copies the Event Days filter value from the monitor filter to each view filter. History Days Copies the History Days filter value from the monitor filter to each view filter. Alert Sounds... Opens the Alert Sounds dialog box for the current monitor. Format Severity... Opens the Format Severity dialog box for the current monitor. Delete Deletes a monitor from a cascade menu of monitors that can be deleted. Mark All As Read Marks all events in the current monitor as read. Acknowledge All... Marks all events in the current monitor as acknowledged. Check For New Events Checks for new events for all views in the monitor. Refresh Re-queries the database for all views in the monitor. (numbered Monitor list) Opens a monitor from the list of most recently used monitors. 7

14 View Menu Table 4. View Menu Menu Item Current View Next View Previous View Show Fields... Sort... Filter... Alert Severities... Rename... Choose Icon... Clone As... Delete... Mark All As Read Acknowledge All... Check For New Events Refresh Operation Selects a view from a cascade menu of available views. Selects the next view. Selects the previous view. Opens the Show Fields dialog box for the current view. Opens the Sort dialog box for the current view. Opens the Filter dialog box for the current view. Opens the Alert Severities dialog box for the current monitor. Renames the current view. Opens the Choose View Icon dialog box for the current view. Appends a new view that is a copy of the current view. Deletes the current view after confirmation. Marks all events in the view as read. Marks all events in the view as acknowledged. Checks for new events for the current view. Re-queries the database for the current view. Event Menu Table 5. Event Menu Menu Item Menu Subitem Operation Filter All Events Removes temporary event filter. This Computer Invokes a temporary event filter showing the events in the selected view for the computer in the selected event. Computer... Prompts for a computer and invokes a temporary event filter showing the events in the selected view for that computer. History Invokes a temporary event filter showing the history for the selected event. Next Event Selects the next event. Previous Event Selects the previous event. Mark As Read Marks the selected event as read. Mark As Unread Marks the selected event as unread. Hide Marks the selected event as hidden. Unhide Marks the selected event as not hidden. Acknowledge Marks the selected event as acknowledged. Update Progress... Opens the Update Progress dialog box for the selected event. Complete Fix... Opens the Complete Fix dialog box for the current event. 8 Tivoli Management Solution for Microsoft SQL: Event Monitoring

15 Detail Menu Table 6. Detail Menu Menu Item Header Text Binary Data (Bytes) Binary Data (Words) Select All Copy Operation Toggles whether header will appear in the detail pane. Toggles whether BriefText and FullText will appear in the detail pane. Toggles whether BinaryData will appear in the detail pane (as bytes). Toggles whether BinaryData will appear in the detail pane (as 32-bit words). Selects all of the text in the detail pane. Copies all of the text in the detail pane to the clipboard. Tools Menu Table 7. Tools Menu Menu Item Menu Subitem Operation Option Mark As Read Toggles the Mark As Read option. Acknowledge Toggles the Acknowledge option. Username... Opens the Username dialog box. Show Hidden Events Toggles the Show Hidden Events option. Jet Poll Minimum Prompts for the number of seconds of Jet database inactivity occurring after activity before executing a poll. Jet Poll Maximum Prompts for the maximum number of seconds before Jet database with activity will be polled regardless of the Jet Poll Minimum value. SQL Server Poll Enter the SQL Server database polling interval in seconds. Alert Sound Enabled Toggles the Alert Sound Enabled option. Alert Play Interval... Opens the Alert Play Interval dialog box. Alert Snooze Interval... Opens the Alert Snooze Interval dialog box. Save Settings on Exit Toggles the Save Settings on Exit option. Save Settings Now Saves the current program settings. Help Menu Table 8. Help Menu Menu Item Contents Search For Help On... About Tivoli Event Monitor Operation Displays the Tivoli Event Monitor help window positioned at the Contents. Displays the Tivoli Event Monitor help window positioned at the Index. Displays a window with the version number of the Tivoli Event Monitor Right Mouse Button Menus Clicking the right mouse button over certain portions of the event monitor will bring up a context sensitive pop up menu. Chapter 3. Menus 9

16 Pop Up Menu for View Button The pop up menu chart for a view button is identical to the View menu heading in the pull down menu chart. Note that the actions performed will be for the view button that was right-clicked which is not necessarily the currently selected view. Pop Up Menu for Event Column Header Table 9. Pop Up Menu for Event Column Header Menu Item Operation Hide Hides the selected column. Unhide Unhides a column from a cascade list of available columns. Propagate Width Copies the width of the current column to the same column of all other views in the monitor. Show Fields... Opens the Show Fields dialog box for the current view. Pop Up Menu for Event Table 10. Pop Up Menu for Event Column Header Menu Item Operation All Events Removes temporary event filter. This Computer Invokes a temporary event filter showing the events in the selected view for the computer in the selected event. Computer... Prompts for a computer and invokes a temporary event filter showing the events in the selected view for that computer. History Invokes a temporary event filter showing the history for the selected event. Mark As Read Marks the selected event as read. Mark As Unread Marks the selected event as unread. Hide Marks the selected event as hidden. Unhide Marks the selected event as not hidden. Acknowledge Marks the selected event as acknowledged. Update Progress... Opens the Update Progress dialog box for the selected event. Complete Fix... Opens the Complete Fix dialog box for the current event. Pop Up Menu for Detail Pane Table 11. Pop Up Menu for Detail Pane Menu Item Undo Cut Copy Paste Delete Select All Operation (Disabled) (Disabled) Copy the selection to the clipboard. Disabled if no selection. (Disabled) (Disabled) Select the entire detail pane. 10 Tivoli Management Solution for Microsoft SQL: Event Monitoring

17 Chapter 4. Dialog Boxes Filtering Dialog Box Filtering determines which events will display in a given view. Each view has a filter. There is also a monitor filter that is applied to every view. The Filter Dialog Box is divided into the following tabs described below: v Computer v Day/Time v EventType/Class v Severity v Description v Fix/Acknowledge Universe Strings Filters use universe strings which are comma-separated lists used to select or exclude items. To exclude an item use E= before that item. To exclude a list of items place them in parentheses after E=. You can also specify a range using a - between two values. The special character * matches any number of characters while % matches exactly one character. To use any special character as an ordinary character precede that character with. Some examples of universe strings: v AUTOMATION,PERFORMANCE v E=RDR v E=(RDR,SVR) v A-Z v Server% v SVR* Filter Dialog Box - Computer Tab The filter will be restricted to the computers specified in the universe string in the Computer field of the Computer tab. Empty indicates unrestricted, no computers 11

18 will be filtered out, all computers will be returned. The Browse button provides a tree view for more convenient selection. Filter Dialog Box - Days/Time Tab The value specified in the Events field controls the number of days prior to the current day that events will be displayed. For the monitor filter the default is 30 days. For the view filters the default is 0 days (today only). The value specified in the History field controls the number of additional days that events will be displayed when the temporary history filter is invoked. The default for this value is 1 day. 12 Tivoli Management Solution for Microsoft SQL: Event Monitoring

19 The From and To fields can be used to restrict the events displayed to a time of day range. Filter Dialog Box - EventType/Class Tab The EventType/Class tab is the major distinguishing factor between most views. One example would be when only New and Updated are checked this corresponds to the Tivoli Open Problem view (shown below). Another example would be when only Event Log is checked and Class is System this corresponds to the Windows NT System Messages view. Filter Dialog Box - Severity Tab The Severity tab allows the view to be restricted to certain severities. Chapter 4. Dialog Boxes 13

20 For example, you might want to uncheck the AS (Audit Success) checkbox for the Windows NT Security Messages view so that Audit Success events will not appear in the view. Note that the Windows NT, VMS, and ISO severities are arranged to show their mapping to the corresponding Tivoli numeric severity. Filter Dialog Box - Description Tab The Description tab allows you to restrict which events are displayed based on the contexts of the BriefText and FullText database fields. If you use the Both radio button then both criteria are identical. 14 Tivoli Management Solution for Microsoft SQL: Event Monitoring

21 Filter Dialog Box - Fix/Acknowledge Tab The Fix/Acknowledge tab allows you to restrict which events are displayed based on the database fields relating to fix and acknowledge. Filter Dialog Box - Advanced Tab The Advanced tab allows restrictions based on additional database fields. RuleName and EntityContext are particularly useful with Tivoli events while Source and Handle are most often used with Windows NT Events. Chapter 4. Dialog Boxes 15

22 Show Fields Dialog Box The Show Fields dialog box determines which fields will be displayed and in which order. Sort Dialog Box Double-clicking on an available field or highlighting that field and clicking on Add will move that field to Show these fields in this order. Double-clicking on a shown field or highlighting that field and clicking Remove will move that field to Available fields. Highlighting a shown field and using the Move Up or Move Down buttons will change the order in which the fields are displayed. Fields in parentheses indicate an icon rather than text field. Severity is the severity text while (Severity) is the severity icon. Click OK to apply your changes or Cancel to discard them. The Sort dialog box determines the order in which events will be displayed. 16 Tivoli Management Solution for Microsoft SQL: Event Monitoring

23 Choose View Icon Dialog Box Double-clicking on an available field or highlighting that field and clicking on Add will move that field to Sort order. Double-clicking on a sort field or highlighting that field and clicking Remove will move that field to Available fields. Highlighting a sort field and using the Move Up or Move Down buttons will change the order in which the fields are sorted. Highlighting a sort field and using the Ascending or Descending buttons will change that sort field to ascending or descending. Click OK to apply your changes or Cancel to discard them. This dialog box allows the user to choose another icon for the view. It also supports the maintenance functions of add and delete. Click on a button or scroll through the list of buttons to select a button. Click OK or press Enter to change the view icon to the currently selected button. Click Close or press Esc to leave the view icon unchanged. Click Delete or press Alt-D to delete (with confirmation) the selected view icon from the list of available view icons. Delete is not available for the built in icons. If you delete an icon that is in use by any monitor definition the icon will show as the Generic icon. Click Add or press Alt-A to add icons to the list of available icons using the Add View Icon dialog box. See Add View Icon Dialog Box on page 18. Chapter 4. Dialog Boxes 17

24 Add View Icon Dialog Box This is a standard file open dialog box that allows the selection of one or more icons to be added to the list of available view icons. Format Severity Dialog Box This dialog box allows the user to choose the text color and icon used for events of a given severity. The text color and icon are used in the event list. Note that to properly preview icon transparency and text colors the background color of this dialog box matches that of the event list. Check one or more of the boxes to indicate which severities to modify. Click Choose Color or press Alt-C to change the text color for the selected severities using the Choose Severity Icon dialog box. Click Choose Icon or press Alt-I to change the icon used to represent the selected severities. Click Select All or press Alt-S to select all of the severities. Click Deselect All or press Alt-D to deselect all of the severities. Click Close or press Esc to close the dialog box. 18 Tivoli Management Solution for Microsoft SQL: Event Monitoring

25 Choose Severity Icon Dialog Box This dialog box allows the user to choose another icon for the selected severities. It also supports the maintenance functions of add and delete. Add Severity Icon Dialog Box Click on a button or scroll through the list of buttons to select a button. Click OK or press Enter to change the severity icon(s) to the currently selected button. Click Close or press Esc to leave the severity icon(s) unchanged. Click Delete or press Alt-D to delete (with confirmation) the selected severity icon from the list of available severity icons. Delete is not available for the built in icons. If you delete an icon that is in use by any monitor definition the icon will show as the default icon for that severity. Click Add or press Alt-A to add icons to the list of available icons using the Add Severity Icon dialog box. This is a standard file open dialog box that allows the selection of one or more icons to be added to the list of available severity icons. Chapter 4. Dialog Boxes 19

26 Alert Severities Dialog Box This dialog box determines which severities will cause an unacknowledged event to be in the alert state. Alert Sounds Dialog Box Click Select All or press Alt-S to select all of the severities. Click Deselect All or press Alt-D to deselect all of the severities. Click OK or press Enter to apply the selections and close the dialog box. Click Close or press Esc to close the dialog box without applying any changes. This dialog box associates a sound with each of the 9 severity levels. The sound icon appears next to each severity level that has a sound association. Select the severity level to change by clicking on the appropriate radio button or sound icon. The dialog box is laid out in a tabular fashion as a reminder as to how Windows NT, VMS, and ISO severities map to the severity levels. Click Choose Sound or press Alt-C to associate a new sound with the selected severity level using the Choose Severity Level Sound dialog box. Click Remove Sound or press Alt-R to remove the association between the selected severity level and a sound. Click Play Sound, double-click the sound icon, or press Alt-P to play the sound associated with the selected severity level. Click Close or press Esc to close the dialog box. 20 Tivoli Management Solution for Microsoft SQL: Event Monitoring

27 Choose Severity Level Sound Dialog Box This is a standard file open dialog box that allows the selection of a sound to associate with a severity level. Update Progress Dialog Box This dialog box is used to provide text that will be stored in the FixText field of the event that is not yet fixed. If the event has not been acknowledged it is also acknowledged at this time. Click OK or press Alt-O to store the FixText and close the dialog box. Click Close or press Esc to close the dialog box without storing FixText. Chapter 4. Dialog Boxes 21

28 Complete Fix Dialog Box This dialog box is used to provide text that will be stored in the FixText field of the event that is fixed. If the event has not been acknowledged it is also acknowledged at this time. Click OK or press Alt-O to store the FixText and close the dialog box. Click Close or press Esc to close the dialog box without storing FixText. 22 Tivoli Management Solution for Microsoft SQL: Event Monitoring

29 Chapter 5. Working With the Event Monitor Managing Event Monitor Definitions Managing Views The monitor definition is a monitor filter and a filter for each of the views. The definition also includes the name and icon for each view as well as which fields are displayed, how they are displayed, and how they are sorted. To save the current monitor definition, choose Save from the Monitor menu. To save the definition under another name, choose Save As... from the Monitor menu. To open an existing definition, choose it from the Open cascade menu from the Monitor Menu. When you save a monitor definition it is available to all users on your computer. To create a new definition with a default view, choose New... from the Monitor menu. This capability is provided but most users will find it far easier to copy an existing definition using Save As... and then deleting or modifying views in this copied definition. To change the monitor filter choose Filter... from the Monitor menu. Choose Event days or History days from the Propagate cascade menu from the Monitor menu to copy the Event days or History days from the monitor filter to every view filter. To delete an existing definition, choose it from the Delete cascade menu from the Monitor Menu. You can only delete monitor definitions that have been saved. You cannot delete the built-in monitor definitions that were installed with the event monitor. A view consists of a filter, shown fields, and sort order. To create a new view use Clone As... from the View menu to copy an existing view. To delete a view, choose Delete from the View menu. To change the view filter, choose Filter... from the View menu. To change the shown fields, choose Show Fields... from the View menu. To change the sort order, choose Sort... from the View menu. The entire View menu is also available by right-clicking on a view button. 23

30 Managing Events Event Filters An event filter is a temporary filter used to select a subset of records or history based on a view. When temporary filtering is active the View Label text changes to reflect the filtering. The View Label background color also changes to remind the user that the events being displayed do not constitute the entire view. The available event filters are: v This Computer (based on the computer in the selected event) v Computer... (based on a prompt) v History (based on the selected event) All Events restore normal filtering as does changing to any other view. These functions are available from the Event menu or by right-clicking on any event. Event Read Status Events that have not been read are displayed in bold while those that have been read are not. By default an event is considered read when the event information has been displayed in the detail pane. This behavior can be changed through the Mark As Read option under Option in the Tools menu. Event read status can also be changed with the Mark As Read and Mark As Unread menu items in the Event menu. These functions are also available by right-clicking on an event. Additionally, there are Mark All As Read menu items in the View and Monitor menus. Event Acknowledge Status Events that have not been acknowledged are potential alert events. Event acknowledge status is changed with the Acknowledge menu item in the Event menu. When an event is acknowledged the user acknowledging the event as well as the date and time are stored. The default user is the currently logged in account. This value can be overridden through the Username option under Option in the Tools menu. This function is also available by right-clicking on an event. If you turn the Acknowledge option under Option in the Tools menu on then an event will be automatically acknowledged when the event information has been displayed in the detail pane. Additionally, there is an Acknowledge All menu item in the View menu and in the Monitor menu. These operations require confirmation. The event acknowledge status stays with an event except that the status is reset to unacknowledged on a new Tivoli Problem event. 24 Tivoli Management Solution for Microsoft SQL: Event Monitoring

31 Event Fix Status The user of the event monitor indicates what corrective action has been taken to resolve a problem using the Update Progress dialog box or the Complete Fix dialog Box. The Update Progress dialog box leaves the event in the work-in-progress state. The Complete Fix dialog box leaves the event in the fixed state. Both dialog boxes allow the user to enter or edit the FixText annotation field for the event. The dialog boxes also note the username, date and time of the entry. If the FixedState is work-in-progress, the event fix status stays with the event except that the status is reset to the not fixed status on a new Tivoli Problem event. If the FixedState is fixed, the event fix status will only stay with the event on a closed Tivoli Problem event. Detail Pane Detail for the currently selected event is displayed in the detail pane. All operations regarding the detail pane are available from the Detail menu as well as from the tool bar at the top of the detail pane. The button for each of these functions is indicated next to the Detail menu item in the descriptions that follow. If Header is selected the first paragraph of the detail is a header constructed from certain event information. The purpose of the header is to supplement the BriefText, FullText, and BinaryData that follow in order to make the detail more complete and suitable for use elsewhere such as in an . If Text is selected the detail continues with the BriefText and FullText of the event. To improve readability BriefText is suppressed when it matches the leading portion of FullText. Either header or text or both must be selected. If Binary data (bytes) or Binary data (word) is selected then the detail ends with BinaryData displayed in the appropriate format. If BinaryData is entirely displayable characters then it is displayed as text to improve readability (eg. Dr. Watson logs). Note that the BinaryData field is truncated to 16Kbytes in the database. Chapter 5. Working With the Event Monitor 25

32 Choose Select All to select all of the text in the detail pane in preparation for a drag and drop operation. You can also select all or a portion of the text in the usual way with the mouse. Choose Copy to copy all of the text in the detail pane to the clipboard in preparation for a paste operation, such as into an program. Alerts An alert event is an unacknowledged event that matched the alert severity criteria for the view in which it is displayed. To change this criteria see the Alert Severities dialog box. Alert events are marked with an exclamation point icon! in the (flag) field. The view button for the view containing any alert events is also marked with a red box. If any view button is marked with a red box then the event monitor icon will appear in the system tray. (This is usually in the lower right corner of the screen.) Options Mark As Read This option determines whether events that are displayed in the detail pane are automatically marked as read in the database. When this setting is off you must explicitly mark events as read. A quick way to do this is to double-click on the event. Acknowledge This option determines whether events that are displayed in the detail pane are automatically marked as acknowledged in the database. When this setting is off you must explicitly mark events as acknowledged. A quick way to do this is to double-click on the event. Username Use this option to specify the username to use in the AcknowledgeBy and Fixer database fields. The default value is the logged in account. Show Hidden Events Ordinarily hidden events are not displayed. Use this option to view hidden events. Note that while hidden events are visible you can unhide them. Jet Poll Minimum When activity is detected in a Jet database the event monitor waits until there has been no activity for this number of seconds before reading the changes. This allows batches of events to be added to the event database without undue event monitor activity. Jet Poll Maximum When the Jet Poll Minimum has kept the event monitor from updating for 26 Tivoli Management Solution for Microsoft SQL: Event Monitoring

33 this number of seconds the event monitor will be updated regardless. This keeps the event monitor from waiting indefinitely when a database is being updated very actively. SQL Server Poll When the event database is a SQL Server database the event monitor checks for new data at this interval. Alert Sound Enabled When this option is enabled the sound associated with the most severe severity level will be played when there are alerts. Alert Play Interval At the end of this interval the event monitor will determine whether a more severe alert has occurred and will play the sound, if any, associated with that severity level provided that Alert Sound Enabled is on. Alert Snooze Interval At the end of this interval a previously played sound for a severity level will expire. If there are still alerts of this severity level the sound is eligible to play again. Save Settings on Exit This option determines whether program settings are saved when you exit the program. Chapter 5. Working With the Event Monitor 27

34 28 Tivoli Management Solution for Microsoft SQL: Event Monitoring

35

36 Printed in the United States of America on recycled paper containing 10% recovered post-consumer fiber.