'); $("#tabs").tabs({ selected: 1 }); $("#ic-homepage__ic-tips").append( quickTipHTML() ); unhideOneProductTip(); $("#ic-homepage__product-tips").wrapInner('
'); $("#ic-homepage__feed-tips").wrapInner('
'); });
IBM Tivoli Monitoring > Version 6.3 > User's Guides > Log File Agent User's Guide > Workspaces reference IBM Tivoli Monitoring, Version 6.3
Workspace descriptions
Each workspace description provides information about the workspace such as the purpose and a list of views in the workspace.
Workspaces are listed under Navigator items. When the agent has subnodes, the Navigator items are listed under the subnode.
Parent topic:
Workspaces reference
Log Files Navigator item
The workspace descriptions are organized by the Navigator item to which the workspaces are relevant.
- Log Files workspace
- This workspace shows a view of the agent's cache of events that are found in the monitored logs. Events from all logs are displayed together in the same workspace. If event filtering and summarization are in use, then the presence of a row in this workspace does not necessarily mean that an event was sent. Records must be saved internally for comparison to others to determine when they must be sent. The saved records are visible here even if no events are sent. When the summary interval expires and a summary event is sent, the corresponding row in this workspace changes from Event to Summary Event, rather than adding a row. But the actual event is sent separately. If event filtering and summarization are not in use, then this workspace shows only the events that are sent.
This workspace contains the following view:
- Logfile Events
- Shows a table of records that are found in the monitored logs.
- All Regular Expression statistics workspace
- This workspace provides information about all the regular expressions that are configured in the format file.
This workspace contains the following view:
- All Regular Expression statistics
- This view provides information about all the regular expressions that are configured in the format file.
- Data Collection Status workspace
- This workspace provides an overview of data collection of the target systems.
This workspace contains the following views:
- Data Collection Status
- This view contains information that reflects the status of data collection for all attribute groups that make up this application all at once. Each attribute group is represented by a row in this table. The status for an attribute group reflects the result of the last attempt to collect data for that attribute group. When you check the status information, you can see whether the agent is performing correctly.
- Thread Pool Status
- This view contains information that reflects the status of an internal thread pool that is used to initialize data collection internally.
- Monitored File Status
- This view contains information that reflects the status of various files and other data sources that are being monitored by the log agent.
- Data Collection Status (remote) workspace
- This workspace shows a view of the agent's cache of events that are found in the monitored logs. Events from all logs are displayed together in the same workspace. If event filtering and summarization are in use, then the presence of a row in this workspace does not necessarily mean that an event was sent. Records must be saved internally for comparison to others to determine when they must be sent. The saved records are visible here even if no events are sent. When the summary interval expires and a summary event is sent, the corresponding row in this workspace changes from Event to Summary Event, rather than adding a row. But the actual event is sent separately. If event filtering and summarization are not in use, then this workspace shows only the events that are sent. In the (remote) version of this workspace, the RemoteHost attribute indicating the host on which the event originated is also available.
This workspace contains the following view:
- All Regular Expression statistics
- This view provides information about all the regular expressions that are configured in the format file.
- High Average CPU Regular Expressions workspace
- This workspace provides information about the regular expressions in the format file that are responsible for the most processor usage in the agent.
This workspace contains the following views:
- Top 10 Regular Expressions by average CPU time consumed
- This view displays a chart of the 10 regular expressions in the format file that are responsible for the most processor usage in the agent. The X axis is labeled with an index number that indicates the regular expression. This number can be correlated with the Filter Number to determine which actual expression is represented by each index.
- Top 10 Regular Expressions by average CPU time consumed
- This view displays a table of the 10 regular expressions in the format file that are responsible for the most processor usage in the agent.
- High Total CPU Regular Expressions workspace
- This workspace provides information about the regular expressions in the format file that are responsible for the most processor usage in the agent.
This workspace contains the following views:
- Top 10 Regular Expressions by total CPU time consumed
- This view displays a chart of the 10 regular expressions in the format file that are responsible for the most processor usage in the agent. The X axis is labeled with an index number that indicates the regular expression. This number can be correlated with the Filter Number to determine which actual expression is represented by each index.
- Top 10 Regular Expressions by total CPU time consumed
- This view displays a table of the 10 regular expressions in the format file that are responsible for the most processor usage in the agent.
- Logfile Events (remote) workspace
- This workspace shows a view of the agent's cache of events that are found in the monitored logs. Events from all logs are displayed together in the same workspace. If event filtering and summarization are in use, then the presence of a row in this workspace does not necessarily mean that an event was sent. Records must be saved internally for comparison to others to determine when they must be sent. The saved records are visible here even if no events are sent. When the summary interval expires and a summary event is sent, the corresponding row in this workspace changes from Event to Summary Event, rather than adding a row. But the actual event is sent separately. If event filtering and summarization are not in use, then this workspace shows only the events that are sent. In the (remote) version of this workspace, the RemoteHost attribute indicating the host on which the event originated is also available.
This workspace contains the following view:
- All Regular Expression statistics
- This view provides information about all the regular expressions that are configured in the format file.
- Logfile Events (v6) workspace
- This workspace shows a view of the agent's cache of events that are found in the monitored logs. Events from all logs are displayed together in the same workspace. If event filtering and summarization are in use, then the presence of a row in this workspace does not necessarily mean that an event was sent. Records must be saved internally for comparison to others to determine when they must be sent. The saved records are visible here even if no events are sent. When the summary interval expires and a summary event is sent, the corresponding row in this workspace changes from Event to Summary Event, rather than adding a row. But the actual event is sent separately. If event filtering and summarization are not in use, then this workspace shows only the events that are sent. In the (v6) version of this workspace, the CustomInteger slots are also available.
This workspace contains the following view:
- All Regular Expression statistics
- This view provides information about all the regular expressions that are configured in the format file.
- Tivoli Log File Profile (remote) workspace
- This workspace shows a view of the agent's cache of events that are found in the monitored logs. Events from all logs are displayed together in the same workspace. If event filtering and summarization are in use, then the presence of a row in this workspace does not necessarily mean that an event was sent. Records must be saved internally for comparison to others to determine when they must be sent. The saved records are visible here even if no events are sent. When the summary interval expires and a summary event is sent, the corresponding row in this workspace changes from Event to Summary Event, rather than adding a row. But the actual event is sent separately. If event filtering and summarization are not in use, then this workspace shows only the events that are sent. In the (remote) version of this workspace, the RemoteHost attribute indicating the host on which the event originated is also available.
This workspace contains the following view:
- All Regular Expression statistics
- This view provides information about all the regular expressions that are configured in the format file.
- Unmatched Regular Expressions workspace
- This workspace provides information about the regular expressions in the format file that do not match any patterns in the log. Remove these unmatched expressions if you do not need them. Or optimize the order of the format file so that these unmatched expressions are checked last (formats are searched beginning from the end of the format file)
This workspace contains the following view:
- Unmatched Regular Expressions
- This view displays a table of the regular expressions in the format file that do not match any patterns in the log. Remove these unmatched expressions if you do not need them. Or optimize the order of the format file so that these unmatched expressions are checked last (formats are searched beginning from the end of the format file).
LFAProfiles Navigator item
The workspace descriptions are organized by the Navigator item to which the workspaces are relevant.
- LFAProfiles workspace
- This workspace shows a view of the individual monitoring profiles that are discovered by the agent. For each configuration/format file pair that is discovered in the FILE_DISCOVERY_DIR config directory, a subnode is created.
This workspace contains the following view:
- Log File Agent Profiles
- This workspace shows a view of the individual monitoring profiles that are discovered by the agent. For each configuration/format file pair that is discovered in the FILE_DISCOVERY_DIR config directory, a subnode is created.
LogfileEvents Navigator item
The workspace descriptions are organized by the Navigator item to which the workspaces are relevant.
- Logfile Events (v6) workspace
- This workspace shows a view of the agent's cache of events that are found in the monitored logs. Events from all logs are displayed together in the same workspace. If event filtering and summarization are in use, then the presence of a row in this workspace does not necessarily mean that an event was sent. Records must be saved internally for comparison to others to determine when they must be sent. The saved records are visible here even if no events are sent. When the summary interval expires and a summary event is sent, the corresponding row in this workspace changes from Event to Summary Event, rather than adding a row. But the actual event is sent separately. If event filtering and summarization are not in use, then this workspace shows only the events that are sent. In the (v6) version of this workspace, the CustomInteger slots are also available.
This workspace contains the following view:
- All Regular Expression statistics
- This view provides information about all the regular expressions that are configured in the format file.
- LogfileEvents workspace
- This workspace shows a view of the agent's cache of events that are found in the monitored logs. Events from all logs are displayed together in the same workspace. If event filtering and summarization are in use, then the presence of a row in this workspace does not necessarily mean that an event was sent. Records must be saved internally for comparison to others to determine when they must be sent. The saved records are visible here even if no events are sent. When the summary interval expires and a summary event is sent, the corresponding row in this workspace changes from Event to Summary Event, rather than adding a row. But the actual event is sent separately. If event filtering and summarization are not in use, then this workspace shows only the events that are sent.
This workspace contains the following view:
- LogfileEvents
- Shows a table of records that are found in the monitored logs.
Tivoli Log File Profile subnode
The predefined workspace descriptions for the subnode are organized by the Navigator item to which the workspaces are relevant.
Tivoli Log File Profile Navigator item
- Tivoli Log File Profile workspace
- This workspace shows a view of the agent's cache of events that are found in the monitored logs. Events from all logs are displayed together in the same workspace. If event filtering and summarization are in use, then the presence of a row in this workspace does not necessarily mean that an event was sent. Records must be saved internally for comparison to others to determine when they must be sent. The saved records are visible here even if no events are sent. When the summary interval expires and a summary event is sent, the corresponding row in this workspace changes from Event to Summary Event, rather than adding a row. But the actual event is sent separately. If event filtering and summarization are not in use, then this workspace shows only the events that are sent.
This workspace contains the following view:
- Tivoli Log File Profile
- Shows a table of records that are found in the monitored logs.
LogfileProfileEvents Navigator item
- LogfileProfileEvents workspace
- This workspace shows a view of the agent's cache of events that are found in the monitored logs. Events from all logs are displayed together in the same workspace. If event filtering and summarization are in use, then the presence of a row in this workspace does not necessarily mean that an event was sent. Records must be saved internally for comparison to others to determine when they must be sent. The saved records are visible here even if no events are sent. When the summary interval expires and a summary event is sent, the corresponding row in this workspace changes from Event to Summary Event, rather than adding a row. But the actual event is sent separately. If event filtering and summarization are not in use, then this workspace shows only the events that are sent.
This workspace contains the following view:
- Tivoli Log File Profile
- Shows a table of records that are found in the monitored logs.