Elipse Event Log User`s Manual
Contents
1. o E Opened Log Files Date Time Process Thread Module Message a Merged Log Files C eeLogs E3 E3_2013_12 10 CAeeLogs ER E3 2013 12 10 4 2014 01 31 11285043 OSF4 0 920 SYSTEM ProcessInfo E 5 2014 01 31 11 28 50 434 0x5F4 0x644 LICENSER Using 5 retries 6 2014 01 31 11 29 01 907 Ox5F4 0x644 LICENSER Info 100190 Fc 7 2014 01 31 11 29 02 039 Ox5F4 0x644 LICENSER Info 100191 Li 8 2014 01 31 11 29 02 729 Ox5F4 0x630 MANAGER 9 2014 01 31 11 29 02 730 Ox5F4 0x578 MANAGER Manager threz 10 2014 01 31 11 29 02 858 0x5F4 0x578 MANAGER UPDATING DC 11 2014 01 31 11 29 02 859 0x5F4 0578 MANAGER___ Domain updat 12 2014 01 31 11 29 03 839 0x5F4 0x630 E3SERVER Processinfo E 13 2014 01 31 11 29 24 218 0 084 0xA38 B C Program 14 2014 01 31 11 29 24 218 0x984 0xA38 SYSTEM ProcessInfo E2 15 2014 01 31 11 29 27 508 0x984 0988 TRAYMANAGER passz1 Cor 16 2014 01 31 11 29 27 762 0984 0988 SYSTEM RECCIient 1 17 2014 01 31 11 29 28 126 0x5F4 0x448 SYSTEM RECServer 1 18 2014 01 31 11 29 28 538 RECServer 1 NEW connecting from 127 0 0 1 Sent 0 0B Recv 0 19 2014 01 31 11 29 28 540 Elapsed 0 000 REC v2 56 Remote v0 0 000 20 2014 01 31 11 29 28 540 0x5F4 OxAA0 SYSTEM RECServer 1 2 2014 01 31 11 29 28 810 0984 0x988 TRAYMANAGER passz2 Rec 22 2014 01 31 11 29 28 814 0x5F4 OxAA0 SERVERCONTROL CallbackThrea 23 2014 01 31 11 29 49 971 0x5F4 0x620 SYSTEM ProcessInfo E _ ass La ie2. Itis possibleto remove or add columns by right clicking column names Only the Session column cannot be removed Itis also possible to selecta few actions that can be applied to log sections by right clicking the respective row a Running Loggers x F5 Refresh Session Location Buffers written Even E3 C geLogs E3 E3_2014 01 3 Flush Buffers Disable Session Open File Folder Full File Path to Clipboard Create New File 4 n p 1 session Options for editing a specific event of the active session The available options are described on the next table Available options on Running Loggers menu OPTION DESCRIPTION Flush buffers Stores on disk the events currently in memory Enable or Disable Session Disables event recording although it does not stop the session When disabling recording the session row turns red indicating that the log is no longer recording events When enabling this option again the session restarts event recording Open File Folder Opens a Windows Explorer window at the directory where log files are stored configured in the Folder field of the Storage Settings window Full File Path to Clipboard Copies the full path of the selected log session file to the Clipboard Elipse Event Log Viewer 10 OPTION DESCRIPTION Create New File Creates a new log file on the selected session This contextual menu item is disabled in case the recording mode the Log Mode
3. Elipse Event Log User s Manual Copyright 2005 2015 Elipse Software Ltda All rights reserved Version 4 5 120 06 18 2015 Table of Contents 1 Elipse Event Log eerte rene Rs eo eoe Nae E E NN eaea voe eee e ent aea etas eseas 1 2 Elipse Event Log VieWer noe rever oreet ee E Eve PEE See ese Poe Ee ve USE ETUR RR SDN SU UR Rev teens 2 2 1 Configuring File Storage eerte toties reete et oe REPRE Pese osson ss ees bo ee pue iaee 6 2 2 Log Sessions 2 3 Viewing Log Files 2 4 Merging Log Files ore eterne eee eoe eere et eot en gave e ie uu os trato doa eene in 15 2 5 Searching for Events eter eese tene ones uie ee ee ER Dee epa Pedes ence uoa 17 pA clc 18 PESRMuDICcC M aii ie 23 3 Elips Event Log Export reitera oe Pei oe STES SoCs ORS Ekono Saed Oiss Seada 28 3 1 Command Prompt Options sesesssseesesososesesesesssesesesnsnseessnsessescsosssescsesosesesesesnseeeseese 30 4 Elipse Event Log Collector esssssssesesososssescsesesesesesssesecssusessesososssescsesosescsesesnseesesssseseessssee 32 4 1 Collecting LOGS veraos iea i eene E E A ee NUN ee eee ee egere pee vede 4 2 Contents of CollectedLogs ezp File 5 Security RestrictiOhs sesssissicsscesssscesssoseaseassasonneneinadenvenvecsseseesestessestenesuissersesseesoesonsoesoadoeseaesie CHAPTER Elipse Event Log Elipse Event Log is a log syste
4. MA a ies x inier 100 Example of a filter by time 2 7 Bookmarks Bookmarks are tags that can be linked to one or more events in a file On event viewing area there is a column named Bookmarks which displays events that have a linked bookmark In these cases an icon is placed near the event ID 23 Elipse Event Log Viewer SS E amp 2014 01 31 1 etl Elipse Event Log Viewer File View Actions Help QPrT95 a3 vr VEK Ser RRS A mg 2014 01 31 11 29 24 218 11 29 49 971 SYSTEM E Opened Log Files Date Time Process Thread Module Message C eeLogs E3 E3_2014 01 1 5 Merged Log Files E CAeeLogs E3 E3_2013_12_10 a wr 2014 01 31 11 28 50 243 0x5F4 0x620 SYSTEM ProcessInfo E 5 2014 01 31 11 28 50 434 QX5FA 0x644 LICENSER Using 5 retries 6 2014 01 31 11 29 01 907 OX5FA 0x644 LICENSER Info 100190 Fc 7 2014 01 31 11 29 02 039 0SF4 0x644 LICENSER Info 100191 Li 8 2014 01 31 11 29 02 729 QX5FA 0x630 MANAGER 9 2014 01 31 11 29 02 730 OxSF4 0578 MANAGER Manager thre 10 2014 0131 112902858 OxSFA 0 678 MANAGER UPDATING DC 11 2014 01 31 11 29 02 859 0xSF4 06578 MANAGER Domain updat 12 2014 01 31 11 29 03 839 OSF4 0630 E3SERVER Processinfo E Processinfo 15 2014 01 31 11 29 27 508 0x984 TRAYMANAGER passz1 Coi 16 2014 01 31 11 29 27 762 0x984 0988 SYSTEM RECClient 1 17 2014 01 31 11 29 28 126 0x5F4 0x448
5. oe j ewe jJ Storage Settings window The available options on this window are described on the next table Available w T on Storage Settings window DESCRIPTION H NN where logs are stored eee choosing the folder where logs are stored Enable storage management Enables repository management When this option is selected repository management routines are activated Automatically manage the maximum size The log system calculates the available limit based on the partition s free space to manage logs The rule forallocating space in the automatic mode is using 2596 twenty five percent of partition s free space 7 Elipse Event Log Viewer OPTION DESCRIPTION Limit the diskspace used for storing log Specifies the maximum available size for files to storing logs on disk If itis specified a size equal to 0 zero log files are deleted as soon as theyare released bythe session Minimum diskspace free to storage MB Determines the minimum disk space on a partition to reallocate logs orto start recording on the repository This is the lower band limitto be monitored Delete log files older than days Specifies the number of days during which the files will be stored If this value is equal to 0 zero management occurs by size orby minimum number of files Minimum number of files grouped by Specifies the minimum number of files that name to be kept after deletion must be kept o
6. Export decoder settings V Add event field names Only standard event header fields DateTime Process ID Thread ID V Print Process ID and Thread ID as Hexadecimal Window for exporting events Elipse Event Log Export 28 The available options are described on the next table Available options for exporting events OPTION DESCRIPTION Log files Lists the selected files for export To delete any of them selectitand press the DELETE key Add file Allows adding other files to the list for export Destination path will be created if does not Determines the destination folder for exist export This folderis created if it does not exist If no directory is specified the current path of log files is used folder according to the selected size Add event field names The events are exported in full mode containing event s name and value The default value of this option is selected Only standard event header fields DateTime Only the most important fields are Process ID Thread ID exported The default value of this option is notselected all fields are exported Print Process ID and Thread ID as Allows selecting whether Process and Hexadecimal Thread columns are exported in hexadecimal or decimal format The default value of this option is selected Reset default Returns the export configurations back to their default the Add event field names field selected the Only standard event header fields field
7. ProcessInfo E3Run 0 0KB C Program Files s ProcessInfo E3ADMIN CPU passz1 Connecting to E3 When right clicking a file the following options are displayed on its contextual menu Close All Files Closes all open files Close File Closes only the selected file Merge File Adds the selected file to the Merged Log Files node Open File Folder Opens the directory where log files are stored 2 4 Merging Log Files With Log Viewer itis also possibleto open more than one fileat the same time and merge their information as if they were a single file Events are sorted chronologically which allow an analysis of cause and consequence events among different machines or different files In this example events from two files are merged 1 Click T or use the File Merge Event Files menu The window on the next image is then opened 15 Elipse Event Log Viewer Merge Files Name Size Date modified Folder E3 2013 12 1 16 0KB 12 10 2013 10 52 AM C eeLogs E3 E3 2013 12 1 16 0KB 12 10 2013 10 52 AM C eeLogs E3 4 m p Add file 2 files ok J Cancel Merge Files window The available columns to view files for merging are described on the next table Available options on Merge Files window OPTION DESCRIPTION Name rhe name of the file bue rhesize ofthe file Date modified The date when the file was last modified Folder The path of the file 2 Selectthe
8. establishinga sequence in the regressive analysis of events Total size of the repository The last filter executed is by total size of the repository In this case if still after performing the previous filters the repository is above the limits files are erased from the oldest to the newest ones until reaching the security limit 2 2 Log Sessions Another option available on Log Viewer is the visualization of active log sessions being recorded by the system To open this option select the View Running Loggers menu or click zl The following window is then opened a Running Loggers xa F5 Refresh Session Location Buffers written Even E3 C eeLogs E3 E3_2014 01 31 let 2 i 4 n p 1 session Running Loggers window The available columns for viewing are described on the next table Available columns on the Running Loggers window Session jNameofthelogsession Indicates events lost rejected by the system This counter must always be equal to zero If this value is greaterthan zero itindicates that events were lost and therefore files do nothave all information for debugging If itis equal to 0 zero the buffer is only stored on disk when full If different from 0 zero at every x seconds the buffers are automatically written to disk Log mode JRecording mode S Log file size MB Size of the files in megabytes Buffer size KB ize of buffers in memory 9 Elipse Event Log Viewer
9. file in XML Schema format with the specification of the export format Splits the results of log export into several files decoded with n megabytes Splits an etl file into several files with n megabytes each without decoding them Stops splitting a file when reaches the n value which is the amount of files to create This option can only be used together with the splitb parameter ts dd MM HH mmiss gt Starting date of the events to export te dd MM HH mmiss gt Ending date of the events to export stop lt LoggerName gt Closes a log section specified bythe LoggerName argument Elipse Event Log Export 30 FUNCTION DESCRIPTION stoplogdir directory Recursively stops all open log sessions starting at the path indicated by directory NOTE This action cannot be undone The options for the command parameter are described on the next table NOTE Some of the following commands to be executed need a user belonging to the Windows group Administrator for Windows XP and Windows Server 2003 operating systems For Windows Vista orlater operating systems this process must be executed with higher privileges by using the Run as Administrator option Available options for the command parameter COMMAND DESCRIPTION Displays a message box with a help text about the command line options Forces a display of Elipse Event Log Export settings window Links files with etl extension to Elipse Event Log Export so t
10. is any active filter the displayed value refers to events visible after applying that filter 5 Elipse Event Log Viewer po AREA DESCRIPTION Displays information about time interval between two events Timespan between events Time interval between two events with a precision of milliseconds Interval Amount of existing events between selected events Average Time average between two selected events with a precision of milliseconds In case there are more than two events selected this area only displays the amount of selected events processed events in the selected file pem EE whether there is any active filter in the selected file 2 1 Configuring File Storage By using the Storage Settings option itis possibleto configure automatic management of etl or log files recorded by Elipse systems With it users can manage where log files are stored the maximum size of the repository and the time each fileis kept on the repository based on file s creation date To use this option select the View Storage Settings menu or click 9 Elipse Event Log Viewer 6 Enable storage management 9 Automatically manage the maximum size C Limit the diskspace used for storing log files to Maximum size MB Minimum diskspace free to storage MB Delete log files older than days Minimum number of files grouped by name to be kept after deletion Reset to default
11. 0 SYSTEM Processinfo E 35 2014 01 31 11 33 49 975 Ox5F4 0x620 SYSTEM Processinfo E 38 2014 01 31 11 34 29 829 0xSF4 OxAA4 SYSTEM RECServer 1 40 2014 01 31 11 34 49 977 0x5F4 0x620 SYSTEM ProcessInfo E2 43 2014 01 31 11 35 49 982 0x5F4 0x620 SYSTEM ProcessInfo E2 46 2014 01 31 11 36 49 981 0x5F4 0x620 SYSTEM Processinfo Ez 49 2014 01 31 11 37 49 978 0x5F4 0x620 SYSTEM ProcessInfo Ez 52 2014 01 31 11 38 49 975 Ox5F4 0x620 SYSTEM Processinfo Ez 56 2014 01 31 11 39 30 286 0x5F4 OxAA4 SYSTEM RECServer 1 57 2014 01 31 11 39 49 973 0x5F4 0x620 SYSTEM ProcessInfo E2 60 2014 01 31 11 40 49 971 OxF4 0x620 SYSTEM ProcessInfo E2 63 2014 01 31 11 41 49 978 0x5F4 0x620 SYSTEM ProcessInfo E2 66 2014 01 31 11 42 49 971 Ox5F4 0x620 SYSTEM Processinfo Ez 69 2014 01 31 11 43 49 9885 Ox5F4 0x620 SYSTEM Processinfo E 73 2014 01 31 11 44 31 356 0x5F4 OxAA4 SYSTEM RECServer 1 74 2014 01 31 11 44 49 980 0x5F4 0x620 SYSTEM ProcessInfo E2 OxSF4 0x620 SYSTEM Processinfo E _ Example of a result after applying filters It is possible to check filter results using the Process and Module columns 2 6 2 Time Filter ATime Filter allows restricting a message interval by selecting the start and end date and time to display To use this option select the Actions Filter Editor menu or click T and then select the By Time tab The window on the next figure is displayed 21 Elipse Event Log Viewer Filter Editor Em B
12. 14 01 31 11 28 50 434 0x5F4 0x644 LICENSER Using 5 retries to find HASP 6 2014 01 31 11 29 01 907 Ox5F4 0x644 LICENSER Info 100190 Found Hasp HL 7 2014 01 31 11 29 02 039 Ox5F4 0x644 LICENSER Info 100191 License informa 8 2014 01 31 11 29 02 729 Ox5F4 0x630 MANAG Manage 9 2014 01 31 11 29 02 730 Ox5F4 0578 MANAG Manager thread started 10 2014 01 31 11 29 02 858 Ox5F4 0578 MANAG UPDATING DOMAIN 11 2014 01 31 11 29 02 859 Ox5F4 0578 MANAG Domain updated 12 2014 01 31 11 29 03 839 Ox5F4 0x630 E3SERVER ProcessInfo E3Run 0 0KB 14 2014 01 31 11 29 24 218 0984 0x438 SYSTEM ProcessInfo E3ADMIN CPU 15 2014 01 31 11 29 27 508 0x984 0988 TRAYMA pass 1 Connecting to E3 16 2014 01 31 11 29 27 762 0984 0x988 SYSTEM RECClient 1 NEW conne 17 2014 01 31 11 29 28 126 0x5F4 0x448 SYSTEM RECServer 1 NEW conne 18 2014 01 31 11 29 28 538 0x984 0x988 TRAYMA pass 2 E3 Server found 19 2014 01 31 11 29 28 540 0x984 0x988 SYSTEM RECClient 1 E3Admin conr 20 2014 01 31 11 29 28 540 Ox5F4 OxAA0 SYSTEM RECServer 1 E3Admin conr 2 2014 01 31 11 29 28 810 0984 0x988 TRAVMA passz2 Registering E3 Ac 22 2014 01 31 11 29 28 814 0x5F4 OxAAO SERVERC CallbackThread id ACO st 23 2014 01 31 11 29 09971 OxoF4 0x620 SYSTEM ProcessInfo E3SERVER CPU _ 4 m RI n zd n 100 Opening a log file On the event viewing area files are sorted chronologically one ev
13. LICENSER Info 100191 Li 8 MANAGER 9 Go To Previous Bookmark MANAGER Manager three Yio Go To Next Bookmark MANAGER UPDATING DC i i s vV Process and Thread as Hexadecimal MAR loner 12 E3SERVER Processinfo E wu 2014 01 31 11 29 24 218 0x984 0x438 SYSTEM ProcessInfo E2 15 2014 01 31 11 29 27 508 0984 0988 TRAYMANAGER passz1 Cor 16 2014 01 31 11 29 27 762 0x984 0988 SYSTEM RECClient 1 17 2014 01 31 11 29 28126 0x5F4 0x448 SYSTEM RECServer 1 18 2014 01 31 11 29 28 538 0x984 0x988 TRAYMANAGER pass 2 3 19 2014 01 31 11 29 28 540 0x984 0x988 SYSTEM RECClient 1 20 2014 01 31 11 29 28 540 Ox5F4 OxAA0 SYSTEM RECServer 1 2 2014 01 31 11 29 28 810 0984 0x988 TRAYMANAGER passz2 Rec 22 2014 01 31 11 29 28 814 Ox6F4 OxAAQ SERVERCONTROL CallbackThrea 23 2014 01 31 11 29 09 971 OxF4 0x620 SYSTEM ProcessInfo E2 _ a caa nj ER anes as nesena annman mma POE a e 100 Contextual menu of an event Contextual menu options of an event OPTION DESCRIPTION Copy Copies the selected events to the Clipboard The selection performed in the Process and Thread as Hexadecimal is kept during the copy operation name and adds it to all selected events Elipse Event Log Viewer 26 Add Fast Bookmark Adds a bookmark with an automatically generated name to all selected events OPTION DESCRIPTION Go To Previous Bookmark Selects the previous bookmark Go To Next Bookmark Selects the next bookm
14. Logs When executing Eli pse Event Log Collector the dialog box on the next figure is opened Elipse Event Log Collector 32 Search options 9 Collect only the running sessions Status 1 session running Collect log files on disk Input Folder C eeLogs Indude files in sub directories File extension filter eti log Collection interval Everything Acti Please select how you would like to output the file list The list will contain the relative path of each file found inside a compressed ezp file 9 Send by e mail to mE Only save the compressed file to Output folder Output folder C Users vmadmin Desktop m Details View Files Elipse Event Log Collector s main window The available options on this window are described on the next table 33 Elipse Event Log Collector Available options for Elipse Event Log Collector omon O DESCRIPTION Search options Allows selecting how files are collected Collect only the running sessions Log collection is performed only on open log sessions Collect log files on disk Allows selecting log files to collect by using the Input folder option Regardless the selected mode collected files are serialized if supported by the API and bythe log session to the next value on Input folder Informs the directory from where the log files must be retrieved Itis initially filled in with parameters configured on log storage so thatit
15. R CPU _ 5 2014 01 31 11 28 50 434 0x5F4 0x644 LICENSER Using 5 retries to find HASP 6 2014 01 31 11 29 01 907 Ox5F4 0x644 LICENSER Info 100190 Found Hasp HL 7 2014 01 31 11 29 02 039 Ox5F4 0x644 LICENSER Info 100191 License informa 8 Info 100191 License information E3 version 4 5 Build 243 p 77777777777777777777 Manage 9 License number HL2F2E327A Manager thread started E3 Server for E3 Studio UPDATING DOMAIN E3 Studio 1 license s 0 in use 1 available i i E3 Viewer unlimited licenses 0 in use Domain updated E3 Viewer Only unlimited licenses 0 in use Remote Domain Server unlimited licenses 0 in use Remote Domain Client unlimited licenses 0 in use VO points unlimited licenses 0 in use Storage tags unlimited licenses 16 Drivers unlimited licenses 0 in use RECClient 1 NEW conne 17 OPC Server unlimited licen RECServer 1 NEW conne 18 2014 01 31 11 29 28 538 0984 0x988 TRAYMA pass 2 E3 Server found 19 2014 01 31 11 29 28 540 0x984 0988 SYSTEM RECClient 1 E3Admin conr 20 2014 01 31 11 29 28 540 Ox5F4 OxAA0 SYSTEM RECServer 1 E3Admin conr 21 2014 01 31 11 29 28 810 0984 0x988 TRAYMA passz2 Registering E3 Ac 22 2014 01 31 11 29 28 814 0x5F4 OxAAO SERVERC CallbackThread id ACO st 23 2014 01 31 11 29 49 971 0x5F4 0x620 SYSTEM ProcessInfo E3SERVER CPU _ 4 rr T m poss oae senn aa m are acan pT n ze ram em II 100 Information about a log message
16. SYSTEM RECServer 1 18 2014 01 31 11 29 28 538 0984 0988 TRAYMANAGER pass 2 E3 19 2014 01 31 11 29 28 540 0x984 0988 SYSTEM RECClient 1 20 2014 01 31 11 29 28 540 Ox5F4 OxAA0 SYSTEM RECServer 1 21 2014 01 31 11 29 28 810 0 084 0x988 TRAYMANAGER passz2 Rec 22 2014 01 31 11 29 28 814 6F4 OxAA0 SERVERCONTROL CallbackThrea 23 2014 01 31 0x620 SYSTEM ProcessInfo E _ Elipse Event Log Viewer window with bookmarks linked to events The available option on the bookmarks toolbar are described on the next table Available options for the bookmark toolbar ICON OPTION DESCRIPTION Fast Bookmark Adds a bookmark with an automatically generated name forall selected events T Add Bookmark Opens a window to ask for a name forthe bookmark and adds itto all selected events from the selected events M RR bookmark edition wu eee e bookmark y emma 0 peres meses When clicking vs the window on the next figure is then displayed Elipse Event Log Viewer 24 Add Bookmark Bookmark name Bookmark1 Add Bookmark window In the Bookmark name field users must inform a name for the bookmark If there is already a bookmark with this name then the selected event is added to a list of events linked to that bookmark If it does not exist then a new bookmark is created and the selected event is linked to it When clicking v the window on the next figureis then displayed r Edi
17. ark Process and Thread as Hexadecimal Allows selecting whether the view of Process and Thread columns is displayed in hexadecimal default or decimal format This option is preserved peruser anditis also used when exporting events When clicking the Rename Bookmark option the window on the next figure is displayed ra Rename Bookmark Bookmark name Rename Bookmark window In the Bookmark name field users must type a new name for the bookmark This option is valid for single and for multiple selections allowing several events to be grouped under the same bookmark name 27 Elipse Event Log Viewer CHAPTER Elipse Event Log Export It is possible to export files in etl format to a text file for printing as well as for manipulation by another program This is performed by using a tool called Elipse Event Log Export To use this option follow these procedures 1 In Log Viewer select the Actions Export Events menu click or else directly select the Start Programs Elipse Software Elipse Event Log Log Export menu If the Merged Log Files node is selected all data from open events is exported in this option 2 Thewindow on the next figure is then displayed P E Elipse Event Log Export Em Log files C eeLogs E3 E3_2014 01 31 1 etl 4 m b 1 file Add file Destination path will be created if does not exist C eeLogs E3 Browse Split size in MB 0
18. column or the session are incompatible with the creation of new files The Running Sessions window allows dragging and dropping files to Log Viewer s main window as well as to an external window such as Windows Explorer for example In case of Log Viewer s main window the behavior of this feature is the following if the fileis dragged and dropped onto the Merged Log Files item itis added to this item If the fileis dropped onto any other area of the main window the default behavior the fileis added to the Opened Log Files item In case of a file being dragged outside Log Viewer s main window a copy of the file is then created on the destination where itis dropped 2 3 Viewing Log Files Log Viewer allows opening one or more files at the same time merging information of these files and monitoring log sessions Log files with an etl extension can be opened by Log Viewer in three ways By using theFile Open Event File menu By using the F gt icon on the toolbar By dragging a file to the window The result is a window similar to the one on the following figure 11 Elipse Event Log Viewer E3 2014 01 31 1 etl Elipse Event Log Viewer rca C fn File View Actions Help p 5 al r vive wivivvizmal2m o e E Opened Log Files Date Time Process Thread Module Message C eeLogs E3 E3_2014 01 Merged Log Files 4 2014 01 31 11 28 50 243 Ox5F4 0x620 SYSTEM ProcessInfo E3SERVER CPU _ 5 20
19. e default e mail client of the machine where Elipse Event Log Collector is installed Elipse Event Log Collector 36 37 4 2 Contents of CollectedLogs ezp File The CollectedLogs ezp file is generated using the PKZIP format and can be opened by any program that also decompress the ZIP format At least there is one eeLogCollector_Readme txt file inside the CollectedLogs ezp file This file contains all records of the executed collect process even if the collect process did not find or add files This is important to inform what was collected Elipse Event Log Collector CHAPTER TEN Security Restrictions For operating systems beginning with Windows XP Elipse Event Log since version 4 0 creates a user on thelocal machine during the installation process named eeLogs and adds it to the Performance Log Users group This user is needed by Elipse Event Log to control log sessions created by processes without administrator privileges on the machine These new policies comply with Microsoft recommendations to allow granting special rights to processes or users without privileges aiming to improve system security against malicious users But if this user is modified that includes deleting or editing its parameters possibly thelogs may not have access to session control because of the differences between edited and required configurations thus leading to event losses Therefore itis not advisable to change these settings To res
20. ent by row Messages in green are information about the structure of log files and are not part of messages of the process that recorded events on the session The status bar on the lower part of the window always indicates the number of selected events in this example 88 the percentage of processed ones in this example 100 and the status of search filters in this example the search was not affected by filters When right clicking the header of the event list it is possible to select on its contextual menu which columns are visible or invisible to users To view message details select the corresponding row and type ENTER or double click the message The window on the next figure is then displayed Elipse Event Log Viewer 12 Event Properties ee Date 2014 01 31 ID 13 Time 11 29 24 218 Process 0x984 f Category 17 Thread 0xA38 Module E3 Message C Program Files Elipse Software Elipse E3 Bin E3Admin exe E3 4 5 Build 243 Session 1 WinSta0 Default gt BLOB Data Log message details The available options on this window are described on the following table Available options on the Event Properties window OPTION DESCRIPTION Dae rhe event date in YYYY MM DD format DoT unique identifier for every event ime The event time in HH MM SS 000 format Identifier of the process generating the event This value can be displayed in hexadecimal or decimal format depend
21. er s research organization and should not be construed as Gold Independent Software Vendor ISV statements of fact Gartner disclaims all warranties expressed or implied with respect to this research including any warranties of merchantability of fitness for a particular purpose
22. files to merge by clicking Add File 3 Events are opened already sorted by time such as in the next figure Elipse Event Log Viewer 16 E Elipse Event Log Viewer File Actions Help Pr49 aa amp TT View vwY w v v vm Ra gm Qjeee B Opened Log Files C eeLogs E3 E3_2014_01_31 Merged Log Files C eeLogs E3 E3_2013 12 10 C eeLogs E3 E3_2013_12 10 Date 2013 12 10 2013 12 10 9 2013 12 10 10 2013 12 10 Time 10 52 20 882 10 52 20 882 10 52 22 867 10 52 23 314 Process Thread 0x6B4 Ox6B4 Module SYSTEM SYSTEM SYSTEM SYSTEM Message ProcessInfo JOSERVER CPU 0 ProcessInfo JOSERVER CPU 41 ProcessInfo E3UACLIENT CPU ProcessInfo E3UACLIENT CPU 100 Window with files for merging Another option is selecting a file from the Opened Log Files node right clicking it and then selecting the Merge File option That file is automatically added to the Merged Log Files node The status bar informs the total amount of events of all files opened as a set These files are on the left area below Merged Log Files If the whole node is selected events from all files of this node are viewed However when selecting each file individually only its own events are displayed 2 5 Searching for Events Log Viewer offers search and filter functions which makes it easy to search for specific events inside a file To use this option click the Actio
23. g all bookmarks or locating a bookmark Previous Bookinark Selects the previous bookmark Next Bookmark Selects the next bookmark Shows the active log Running Loggers sessions on the system Opens the Elipse Collect files Event Log Collector s window 5 bestens pene the Elipse Export Events Event Log Export s window Refreshes the view with the last events recorded on disk If Refresh View there are events in memory they are recorded on disk before refreshing Cancels the view Cancel Refresh refresh with the files on disk Displays the file Storage Settings storage configuration window Elipse Event Log Viewer 4 ICON COMMAND ACTION Selects a category to Categories sort the message Opens a window with the version of Log Viewer and its components The available categories for message sorting are described on the next table Available categories for message sorting NUMBR CATEGOY COLORS oto header Green morro Red O jaa Message forgeneralusage as a ae performance data ne me CC COC SSCS 17 Additional information Purple about the module The status bar of Log Viewer s main window is divided into four areas shown on the next table Areas of Log Viewer s status bar AREA DESCRIPTION Number of events Number of events of the selected file on the viewing area If there is no file selected it displays the message Ready In case there
24. hat these files can be opened in Windows Explorer by double clicking them This must be executed as Administrator Removes the Elipse Event Log Export link to files with an etl extension This must be executed as Administrator Quiet mode It does not displaya dialog box with error messages queryall Displays a window with all active log sessions Selecting the check box near the name of the session and clicking Stop allows closing that session This must be executed as Administrator When right clicking a session the Session Name to Clipboard copies the session name to the Clipboard and Full File Path to Clipboard copies the full path of the session file to the Clipboard options are presented singleton Avoids that several instances of the same process in which Elipse Event Log Exportis running are opened 31 Elipse Event Log Export CHAPTER Elipse Event Log Collector Elipse Event Log Collector was created to automate the process of sending logs to Elipse With the collector users need al most no configuration since the program already executes all the necessary steps according to the type of file to collect etl log or any other file extension and generating at the end of the collect process a compressed file supported by any program that decompresses files in ZIP format NOTE Starting with version 4 5 build 60 of Elipse Event Log Collector users must install Elipse Event Log Tools 4 1 Collecting
25. ing on the selection performed in the Process and Thread as Hexadecimal ption of the event s contextual menu the beginning of this chapter 13 Elipse Event Log Viewer OPTION BLOB Data Copy DESCRIPTION Identifier of the thread generating the event This value can be displayed in hexadecimal or decimal format depending on the selection performed in the Process and Thread as Hexadecimal ption of the event s contextual menu Identifies the module function or area name inside the process orthread responsible for generating information about the event Allows navigating through the previous and next events relative to the selected event ae whether along with the event there is binary data Binary Large Objects attached which complements information given by the event s Message field This field is optional and therefore it may not have data associated Allows copying the selected event to the Clipboard Cose ooo closes this window When mouse pointer remains over an event for some time a tooltip appears displaying the message as in the next figure Elipse Event Log Viewer 14 E3 2014 01 31 1 etl Elipse Event Log Viewer EEEEGH fae File View Actions Help Pr 5 a arT e xwvivvigRa3 Zm ioilueaes je E Opened Log Files ES Date Time Process Thread Module Message C eeLogs E3 E3_2014 01 Merged Log Files 4 2014 01 31 11 28 50 243 Ox5F4 0x620 SYSTEM ProcessInfo E3SERVE
26. is possible to determine where logs are currently generated To select a directory click El or use the key combination ALT l Include files in sub directories Indicates if the collect process must be performed by searching files on sub directories Collection interval Allows selecting a time interval to collect logs The available options on this combo box are the following Everything all logs Last 24 hours Last 7 days Last 30 days Last 365 days Custom range logs from a specific date When selecting the Custom range option users can choose a specific date to collect the logs Informs the output type of the log collector If the selected option is Send by e mail to the result of the log collect after saved to the output folder is sent by e mail to the address informed on this option If the option is Only save the compressed file to Output Folder the generated file is only saved to the output folder Elipse Event Log Collector 34 OPTION DESCRIPTION Output Folder Indicates the output directory where the compressed log file is saved Regardless of the option selected in Action a copy of the compressed file is always saved to that directory To select a directory click Elor use the key combination ALT O Shows information about the progress of the process of collecting log files Starts collecting log files Stops collecting log files Allows viewing whatlog files were found according to the Inp
27. lable options are described on the next table Available options on the By Message tab OPTION nable Filter oad lear all Verify how messages using the following criteria Output Window 19 DESCRIPTION Enables the usage of a By Message filter Loads a saved filter Saves a filterto a file with an sfi extension Clears the selected filter Checks whether there are errors on filter s syntax Shows the correct syntax to build a filter Edits scripts of the selected filters Displays the help for the selected option on Functions or else the error messages after check using the Verify option Elipse Event Log Viewer When clicking Help a window is displayed with the correct syntax for each valid keyword such as the next figure Comments Substrings Test t Test VsubstringV a Thread Description Filter events by its thread ID Using Thread Tid1 Tid2 Tid3 Process Description Filter events by its process ID Using Process Pid1 Pid2 Pid3 Message Description Filter events using a string or substring of the message Using Message TEXT 1 TEXT2 TEXT3 J Category Description Filter events by its category ID Using Category Cati Cat2 Cat3 Module Description Filter events using a string or substring of the module Using Module 1 Module2 Module3 Window with help on correct keyword sintax When more than one
28. m developed by Elipse Software which integrates some new features for users and itis available for Windows XP or later For previous operating systems logs still work the same way that is stored on text files The main changes incorporated to the system are relative to e The format and the way logs are recorded The way to view data The way to manage files by the system As for the record format files are no longer stored as text but in binary format which allows more information to be stored by events This allows a series of new features applied to stored data such as filters recording binary messages sorting and searching As for the recording mode itis now safer and robust In case of any failure during the process logs are always stored on disk which guarantees that messages are not lost In addition new file recording modes were added allowing sequential and circular files as well as serialization for backup As for ways to view data the new system now is an ActiveX control which can be also integrated into an E3 application In addition itis possible to export events to a text file With the new viewer itis possible to filter search and select specific messages Finally there is a new file management which guarantees maintenance of maximum filesize on disk without running out of the available space Thelog service from the moment it is configured and started constantly monitors the repository folder contr
29. n the repository when excluding files derived from the same name If this value is equal to O zero management occurs bysize or by minimum size of files A value greater than zero leaves atleastthis amount of files for each group of names as for example E3 E3Server etc Reset to default Restores default values for fields Twenty five percent of partition s free space Automatic management of the space One hundred eighty days Two files NOTE The following routines and the management only occur when there is a need to release files because their size is near the configuration limit the Limit the diskspace used for storing log files to option The execution order of repository s file exclusion filters is the following 1 Elipse Event Log Viewer Creation date When executing the management all files with a creation date prior to the maximum allowed the Delete log files older than days option are erased starting from the oldest to the newest ones as long as the size of the files overrides the repository s maximum quota Name pattern If even after erasing the oldest files of the repository the Delete log files older than days option still the remaining size is greater than the limit files are processed by a name filter the Minimum number of files option In this filter files are erased up until the control limitis reached but preserving at least the configured amount of files This is very useful for
30. not selected and the Print Process ID and Thread ID as Hexadecimal field selected Set default Saves the current export configurations When more than one file is selected for export the name of the file is ProcessedEvents log When only one file is selected for export the name of the fileis the same but its extension changes to log After configuring this option click Export The window on the next figure is opened when event export starts 29 Elipse Event Log Export Preparing to export To C eeLogs E3 ProcessedEvents log KB s 0 Current OKB Events 0 Export events progress window Depending on the size of the files to export this may be a time consuming task because files are read from the beginning to the end and then sorted before the export process of events starts 3 1 Command Prompt Options Elipse Event Log Export can be used on a command prompt The usage format of the program is the following gt eeLogExport exe function command lt arguments gt The options for the function parameter are described on the next table Available options for the function parameter FUNCTION DESCRIPTION s lt file1 etl file2 etl gt File or files to export Files separated by semicolons are merged d lt folder gt Specifies an output folder for the exported log files If this folder does not exist itis created If this parameter is omitted the current path of log files is used Uses a
31. ns Find menu or click amp The window on the next figure is then opened 17 Elipse Event Log Viewer Find EIE mJ Find what Find Next Match whole word only Direction Cancel Match case Up Down Find window The available options are described on the next table Available options on Find window OPTION DESCRIPTION Fmdwmt Message to search for Match whole word only Searches forthe value as a word ora whole phrase and notas a part of other messages seco PN nnd case nme down the currently selected example mM currently selected value cancel Cancels the operation After searching the whole file according to the selected direction the search is then finished 2 6 Filters Filters are an option to refine event viewing In Log Viewer there are two independent types of filters by Message or by Time 2 6 1 Message Filter A Message Filter allows restricting an event interval by selection the type of message to display To use this option select the Actions Filter Editor menu or click T and then select the By Message tab The window on the next window is displayed Elipse Event Log Viewer 18 Filter Editor x By Message By Time V Enable Filter Load Save Clearall verify Hep Show messages using the following criteria Output window Ln 1 Col 1 SUCCESS no error s By Message tab of the Filter Editor window The avai
32. olling files that must be kept on disk rotating the recent ones and deleting the older ones 1 Elipse Event Log CHAPTER Elipse Event Log Viewer Elipse Event Log Viewer from now on referred only as Log Viewer views messages of a supervisory system stored on files in Event Trace Logfile etl format These logs store information about Elipse systems on user s computer Basically processes store these messages on disk using pre configured folders which are created by thelog system when itis started Aservice running on the system is responsible for managing the size of the files on thelog folder as well as their lifetime If this serviceis disabled or is notrunning itis not possible to perform a file management The main function of Log Viewer is to display system generated messages to users by using filter and search functions making the task of searching for errors easier IMPORTANT These logs are only enabled by users belonging to Windows Administrator or Performance Log Users groups For more information please check the topic Security Restrictions Log Viewer presents the following features Opens files in ETL format Opens more than one file at a time merging the content of these files Searches for messages Filters messages by type and by time Views log sessions in use Exports events to files with tab separated columns Configures view options Configures storage options of messages on disk Allo
33. t Bookmarks Name Rename Bookmark1 Remove Bookmark2 10 Bookmark3 14 Remove All Go To Edit Bookmarks window This window displays a list with all existing bookmarks and the events linked to them The available options on this window are described on the next table Available options on the Edit Bookmarks window OPTION DESCRIPTION Rename Renames the selected bookmark on the list displayed on the window A window asking fora new name is then displayed list displayed on the window Remove All Removes all bookmarks 25 Elipse Event Log Viewer OPTION DESCRIPTION Selects the event linked to the selected bookmark on the event viewing area without closing the edition window Close doses the bookmark s edition window All operations performed on this window are automatically applied When right clicking an event a contextual menu is displayed with the options displayed on the next figure Es E3 2014 01 31 1 etl Elipse Event Log Viewer ES File View Actions Help Pr 5 a nrr ve xwvivvisBR3 ZmJioluees Jje Opened Log Files E Date Time Process Thread Module Message z C eeLogs E3 E3_2014_01_ Header BufferSize 819 2 Merged Log Files C eeLogs E3 E3_2013 12 10 Add Fast Bookmark C eeLogs E3 E3_2013 12 10 Ya Add Booka SYSTEM Processinfo E 5 R E Books LICENSER Using 5 retries 6 iename Booker LICENSER Info 100190 Fc F Edit Bookmarks
34. ted file is then attached to it If there is no e mail client configured or compatible or any other error has occurred while preparing the message the file is not sent In this case users must send this file manually using an e mail client or a webmail Depending on the size of the generated file it may be necessary to send itvia physical media such as a CD or DVD to Elipse Software 35 Elipse Event Log Collector Any error due to search option parameters access rights to output folders insufficient disk space less than 5 MB users aborting the collect process or any other error prevents the CollectedLog ezp final file to be generated While the collect process is running and the output fileis being generated its name hasa tmp suffix therefore itis named CollectedLogs ezp tmp This fileis renamed at the end of the collect process to CollectedLogs ezp If the option to send by e mail was selected a message is displayed asking whether the list of collected files should be displayed before sending it o Would you like to see the list of found files before sending the e mail Message asking to display a list of collected files By clicking Yes a listis displayed with all files added to the file CollectedLogs ezp Name Folder Date modified i Date created E3 2014 01 31 let C eeLogs E3 1 31 2014 1 30 PM 1 31 2014 11 28 AM List of added files Next the e mail is configured to be sent using th
35. tore default user settings users can force the creation of a user by running the log service installation eeLogSvc exe on a command prompt using the eeLogSvc exe i command For security reasons regarding the computer in which the Elipse Event Log user was created this user is as limited as possible granting only the minimum privileges needed for logs The following grant restrictions are applied to the eeLogs user Deny access to this computer from the network Deny log on locally Deny log on through Remote Desktop Services Security Restrictions 38 elipse Headquarters Taiwan Rua 24 de Outubro 353 10 andar 9F No 12 Beiping 2nd St Sanmin Dist 90510 002 Porto Alegre 807 Kaohsiung City Taiwan Phone 55 51 3346 4699 Phone 4886 7 323 8468 Fax 55 51 3222 6226 Fax 886 7 323 9656 E mail elipse rs elipse com br E mail evan elipse com br Check our website for information about a representative in your city or country www elipse com br kb elipse com br forum elipse com br www youtube com elipsesoftware elipse 9elipse com br Gartner 2014 CooMendor ENEENNM 11 Gartner Cool Vendors in Brazil 2014 April 2014 Gartner does not endorse any vendor product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest M ft P t ratings Gartner research publications consist of the opinions of ICr OSO ar ner Gartn
36. ut file options and File extension filter options If compression is successful this list matches the list of compressed files NOTE Changes on the parameters of the Input file options option must be performed carefully because this action determines from where the collector retrieves those files Itis only advised to change these values under technical recommendation by Elipse Software When collecting files with an etl Elipse Trace Logs extension that are in use the program automatically flushes in memory events flush of event buffers preventing loss of information Flushing in memory events to disk only happens when the files to collect are on the same computer where Elipse Event Log Collector is running A collecting executed on remote computers has no way to perform flushing events on the other computer although they are collecting files written to disk The generated output file is always named CollectedLogs ezp When starting a new collect process if there were a previous file on the same output directory named CollectedLogs ezp this file is erased and a new oneis created If the disk unit where the CollectedLogs ezp file is generated has less than or equal to 5 MB free space the collector does not start the collect process If collecting has already begun itis stopped when reaching this limit If the Send by e mail to option is selected at the end of the collect process a window is opened to send the e mail The collec
37. valueis used on a keyword they must be separated by commas The filter script restricts event viewing therefore if no event matches the specified criteria the resulting list of events remains empty Filter elements or keywords are Thread Process Message Category and Module Users can choose between the equal to and different from operators All filter parameters inside parenthesis are evaluated as an OR for that filter keyword or element Example Process x5F4 Elipse Event Log Viewer 20 Module SYSTEM This means that only events that match the following logical equation are displayed Process x5F4 AND Module SYSTEM To turn the filter on click T on the toolbar For the filter on the previous example the result is similar to the one displayed on the next figure File View Actions Help Ar 9 a a vwpww v v vis Rime e B Opened Log Files Date Time Process Thread Module Message Oo OSSA 4 2014 01 31 1128 0 243 OxSFA 01620 SYSTEM Processinfo E W Merged Log Files 17 2014 01 31 11 29 28 126 0xSF4 OxM8 SYSTEM RECServer 1 C eeLogs E3 E3_2013 12 10 20 2014 01 31 11 29 28 540 0xSF4 OxAA0 SYSTEM RECServer 1 CAeeLogs ER E3 2013 12 10 5 2014 01 31 11294997 O5Fi 0620 SYSTEM ProcessInfo Ez 26 2014 01 31 11 3049982 OF 0x620 SYSTEM Processinfo E 29 2014 01 31 11 3149970 QoFA 0x620 SYSTEM Processinfo E 32 2014 01 31 113249970 OSF4 0x62
38. ws selecting and copying events to the Clipboard To use Log Viewer follow these procedures 1 OntheStart menu select Programs Elipse Software Elipse Event Log Log Viewer The window on the next figure is opened Elipse Event Log Viewer 2 Z Elipse Event Log Viewer an Ex i File View Actions Help ip lalavr e vw v vvizBRalamuigl us e Opened Log Files Date Time Process Thread Module Message Merged Log Files Elipse Event Log Viewer s main window The program is divided into two areas on the left side is the file s viewing area and on the right side is the event s viewing area Above them there is a toolbar and below there is a status bar The available options on this toolbar are described on the next table Available options on the toolbar ICON COMMAND ACTON Opens several files and merges the Merge Event Files events cronologically on the same view file Ba Copies the selected events to the Opens the window to search for Shows the window 3 Elipse Event Log Viewer ICON COMMAND ACTION Turns on or off the Toggle Filter On Off filters on the events of the selected file vi Creates a bookmark with a default name Bookmarkn Fast Bookmark where nis an automatically incremented number v Creates a bookmark Add Bookmark by opening n window to choose its name r Removes the Opens an edition window which allows removing a Edit Bookmarks bookmark removin
39. y Message By Time V Enable Filter Start 1 31 2014 11 28 50AM 143 E ms p End 1 31 2014 1 06 49PM 971 E as ok J ca J j By Time tab of the Filter Editor window The available options are described on the next table Available options on the By Time tab OPTION DESCRIPTION Enable Filter Enables the usage of a By Time filter Selects the starting date and time forthe filter filter Whenever the final date and time are previous to the start date and time or the final time interval is previous to the start time interval the filter is automatically disabled On a By Time filter the start time is included but the final one is excluded That is a filter between 09 30 47 and 09 35 47 displays only events up to the second 46 Therefore itis not allowed a By Time filter using the same dates and times Elipse Event Log Viewer 22 Notice that although itis possibleto select the starting and ending time by message number the milliseconds of the interval are zeroed Therefore when selecting a specific starting second all its events are listed since the first millisecond To turn the filter on click T on the toolbar The result is similar to the one showed on the next figure for messages in the interval between 2014 01 31 11 28 50 and 2014 01 31 13 06 49 E 2014 01 31 1 etl Elipse Event Log File View Actions Help Br S aM VA k See R a amiojnse
Download Pdf Manuals
Related Search