Download EventTracker v6.3 User's Guide

E V E N T T R A C K E R
V E R . 6 . 4
U S E R ’ S
G U I D E
E V E N T T R A C K E R
L O G
S E A R C H
EventTracker Log Search
Filter and display event logs based on user-defined criteria. The user can define the
filter (or exclude) string as well as specify the output format.
Usage: Forensic Analysis of specific events, broad searches per criteria with
subsequent sorting and ordering of the result set.
For more information refer EventTracker Log Search guide.
Event Traffic Analysis
After EventTracker is deployed on numerous systems in a large Network it is very
likely that you notice EventTracker receiving millions of events. Actually a majority of
these events would be of little use to you. Using appropriate priority you can filter out
unnecessary events to improve utility. `Filtering unnecessary events’ is a powerful
feature based on priority configured by you.
Traffic Analyzer is a tool that is part of the EventTracker Console. It helps to find the
details of the most common events and to set your order of priority. Accordingly create
filters for non-essential events that are just increasing traffic but have little value.
Filtering is a continuous process. Priority may vary from one system to another. Over a
period of time, with your experience, priority events can be separated from non-priority
events in a specific system. Repeating this process every week enables you to receive
only events of value in optimizing your operations. When non-priority events are
filtered out EventTracker functions optimally.
This report provides total counts per system for each event id. Filter and display event
count details based on user-defined criteria.
Usage: Analyze Windows specific security events, correlate events, broad searches
per criteria with subsequent sorting and ordering of the result set.
1
Open the Management Console.
2
Click the Tools menu and select the Traffic Analyzer option.
EventTracker displays the Traffic Analyzer.
11BCHAPTER 11
ANALYSIS
331