Monitored Logs Report attributes represent log settings that affect future log entries, such as the maximum log size and when old entries should be deleted. Monitored Logs Report is a multiple-instance attribute group. You cannot mix these attributes with those of any other multiple-instance attribute group.
% Usage The percentage of the log used. Valid values are positive integers in the range of 0 to 100 (expressing a percentage).
Usage: The following situation notifies you when the Security Log reaches 50% of the capacity you set as a maximum:
*VALUE *Log Name *EQ Security *AND *VALUE *Capacity *EQ 50
Current Size The current size of a specific log in bytes. This attribute reflects the size of the file on disk, and it might not match the value displayed by the event log viewer. This attribute is the 64-bit version of Current Size. Note: the value 9223372036854775807 indicates Value_Exceeds_Maximum and the value -9223372036854775808 indicates Value_Exceeds_Minimum.
Current Size (Superseded) The current size of a specific log in bytes. This attribute reflects the size of the file on disk, and it might not match the value displayed by the event log viewer. Valid values are positive integers in the range 0 to 2147483647 (expressing an integer). Note: the value 2147483647 indicates Value_Exceeds_Maximum and the value -2147483648 indicates Value_Exceeds_Minimum.
Usage: The following situation notifies you when the size of the Application Log is greater than 512 bytes:
*VALUE *Log Name *EQ Application *AND *VALUE *Current Size *GT 512
Date Time Last Modified The date and time when the file was last modified.
Log Name Use this attribute to create a situation where you want to specify a specific log to monitor or exclude events written to a specific log. Valid format is a text without case-sensitivity with a range from 1 to 32 characters.
Log Name (Unicode) Use this attribute to create a situation where you want to specify a specific log to monitor or exclude events written to a specific log. Valid format is a text string of up to 392 bytes.
Maximum Size The maximum size of the log file in bytes.< This attribute is the 64-bit version of Max Size. Note: the value 9223372036854775807 indicates Value_Exceeds_Maximum and the value -9223372036854775808 indicates Value_Exceeds_Minimum.
Maximum Size (Superseded) The maximum size of the log file in bytes. Valid values are positive integers in the range 0 to 4194240 (expressing an integer). Note: the value 2147483647 indicates Value_Exceeds_Maximum and the value -2147483648 indicates Value_Exceeds_Minimum.
Usage: The follow situation notifies you when the Application Log reaches 512 bytes:
VALUE *Log Name *EQ *Application *AND *VALUE *Max Size *EQ 512
Record Count The number of records in a log. This attribute is the 64-bit version of Record Count. Note: the value 9223372036854775807 indicates Value_Exceeds_Maximum and the value -9223372036854775808 indicates Value_Exceeds_Minimum.
Record Count (Superseded) The number of records in a log. Valid values are positive integers in the range 0 to 4194240 (expressing an integer). Note: the value 2147483647 indicates Value_Exceeds_Maximum and the value -2147483648 indicates Value_Exceeds_Minimum.
Usage: The following situation notifies you when the System Log contains 55 or more records:
*VALUE *Log Name *EQ *System *AND *Record Count *GE 55
Retention This attribute reflects the retention policy, expressed in days when the "Overwrite events older than" policy is in effect (for Windows 2003 and Windows XP only). Valid values include (0) Overwrite events as needed, (-1) Do not overwrite events, (-2) Archive the log when full. Do not overwrite events, (2147483647) Value_Exceeds_Maximum and (-2147483648) Value_Exceeds_Minimum.
To verify this number, check the Retention field in the Monitored Logs report.
Server Name The managed system name. The form should be hostname:agent_code.
Examples include spark:KNT or deux.raleigh.ibm.com:KNT.
In workspace queries, this attribute should be set equal to the value $NODE$ in order to populate the workspace with data. This attribute is generally not included in situations, unless there is a need to customize the situation for a specific managed system.
Timestamp The date and time the Tivoli Enterprise Monitoring Server samples the data.