'); $("#tabs").tabs({ selected: 1 }); $("#ic-homepage__ic-tips").append( quickTipHTML() ); unhideOneProductTip(); $("#ic-homepage__product-tips").wrapInner('
'); $("#ic-homepage__feed-tips").wrapInner('
'); });
IBM Tivoli Monitoring > Version 6.3 > User's Guides > Log File Agent User's Guide IBM Tivoli Monitoring, Version 6.3
Event filtering and summarization
Use the event filtering and summarization options that you set in the configuration (.conf) file to control how duplicate events are handled by the Tivoli Log File Agent.
When a log is monitored, an event can display multiple times quickly. For example, this repeated logging can occur when the application that produces the log encounters an error and it logs this error continuously until the situation is resolved. When this type of logging occurs, an excessive number of events are sent to the monitoring infrastructure. The volume of events has a negative impact on performance.
The event detection and summarization procedures are supported only on events that are sent to IBM Tivoli Monitoring. You cannot complete these procedures on events that are sent to OMNIbus by EIF.
- Detecting and filtering duplicate events
You can configure the Tivoli Log File Agent to handle duplicate events.
- Summary interval
The duplication detection procedure operates over a time period known as the Summary Interval.
- Filtering events
If filtering of events is running, the EventFloodThreshold setting in the configuration (.conf) file informs the agent when to send an event.
- Summarization attributes
The Event Type and Occurrence Count attributes are used to help summarize events.
- View event filtering and summarization in the Tivoli Enterprise Portal
Examples of how data is treated depending on your event filtering and summarization choices.
Related reference:
Configuration file