TNT Software event log monitoring solutions

MMC Based ELM Console


The user interface to the ELM Server is called the ELM Console Snap-In, or the ELM Console. ELM uses the Microsoft Management Console (MMC) framework to host its primary user interface. The ELM Console is implemented as a standalone snap-in that requires MMC 1.2 or later to operate. You may add multiple snap-ins if you have more than one ELM Server in your organization. You can use the ELM Console as a standalone application, or you can add native operating system or third-party snap-ins. By combining all of your snap-ins into a single MMC console, you can manage your network and infrastructure using single-seat administration.

The snap-in provides a logical representation of the options, settings, and features you can configure, and the administrative tasks that you can perform:

Alerts

Alert items identify critical events such as a server or application becoming unavailable. Alerts are displayed in the Alerts container, are visible from any ELM Console, and can be forwarded using any notification method or to another ELM Server for upstream handling.

Event Filters

Event Filters are used to isolate one or more specific events. Event Filters provide a mechanism for selecting a subset of all events. Using wild cards and Boolean logic, the filter will identify an event or group of events. Any number of Event Filters can be combined to create a complex set of events. By using wildcards and Boolean operators, the Administrator does not have to be familiar with every event log message. Event Filters are available in ELM Enterprise Manager and ELM Log Manager only.

Event Views

Event Views provide a mechanism for grouping events into a view that match one or more filters. Each view is dynamically updated as new events occur. By using Event Views to organize volumes of event log information the administrator can quickly diagnose problems. Event Views are available in ELM Enterprise Manager and ELM Log Manager only.

 

Monitor Items

Monitor Items are individual items that you want to monitor. For example, to collect some or all events from the event logs on Windows 2000, Windows XP, Windows Vista, Windows Server 2003, and Windows Server 2008, you would use an Event Collector. To monitor services, you would use a Service Monitor.

Service or Virtual Agents

The ELM Server communicates with Service Agents and Virtual Agents. ELM Enterprise Manager Service Agents monitor Windows 2000, Windows XP, Windows Vista, Windows Server 2003, and Windows Server 2008 event logs, system services, performance data, and active processes and forward information to one or more central ELM Servers . Service Agents run on the monitored system and can perform real-time or scheduled monitoring. Virtual Agents provide remote monitoring; software is not required on the monitored system.

Notification Methods

Notification Methods are the ways to be notified of events that occur. You may have separate methods for various event categories, or separate methods for various application events. For example, you could have one method that describes how to notify a database administrator about important database related events, and another method for notifying a security administrator about important security related events.

Notification Rules

To take action when specific events occur, create a Notification Rule. A Rule combines any number of Notification Methods with any number of Event Filters to create a procedure for notifying an administrator when important events occur.