MonitorWare Knowledge Base

Here is our setup:

We have a rolling 7 day database (keeps last 7 days) of syslog messages from about 12 servers. The number of messages for 7 days ranges from 750,000 to 1,250,000.

If there is an event somewhere in the 7 days we have to do the following:
1) open up Console
2) select the appropriate event view (Syslog - server overview)
3) wait for the query to finish (10-20 sec) - this results in several thousand pages
4) edit the view and select a narrow time range around the event time in question
5) wait for the query to finish (10-20 sec) - this results in a handful of pages
6) do our analyses

My question is: can this be done with only one query -> can the time range of the view be edited BEFORE the query.

We are new to this software application so any ideas or suggestions of a better or different process would also be welcome.

Thank you,
dfg

Hello,

You asked:

"can this be done with only one query -> can the time range of the view be edited BEFORE the query."

Answer:
Yes, it can be done. Simply follow the following steps:

1. Click on "Views" button at the top
2. This will open "Event View Manager" on your right side and will also expand "Events View" node in the tree view on your left side
3. Select the desired view from *right* side. DO NOT select the desired view from left side because that will open up the view immediately and will cause the first query to be executed.
4. After selecting the desired view from right side (Event View Manager), click on Edit button in the tool bar
5. Give your desired time range and save the view
6. Now either click on open button or double click the desired view on right side or simply click the view in tree view to open your view.

By the way, which database are you using?

I hope this will help you out.

Best Regards
Wajih
Adiscon

Thank you - that helps a lot.

We are using MySQL (version 4.1.7) as a database. Are the query times that we are seeing (10-20 secs) in Console typical?

Thank you for your help,
dfg

Hello,

The first query does take some time because there is a paging algorithm impemented in console. So during the execution of the first query, it builds up the paging information for the next 4 to 5 pages and as such when you press the next button for 4 to 5 times, it would execute faster as compared to the first query. After 4 to 5 times, the next query would again be a bit slow as it will build the paging information of the next 4 to 5 pages and so on.

Best Regards
Wajih
Adiscon