Investigating Archiver events - Security Center 5.6

Security Center User Guide 5.6

series
Security Center 5.6
revised_modified
2019-10-09

You can search for events related to Archiver roles, using the Archiver events report.

What you should know

You can check the status of an Archiver by selecting it, setting the time range to one week, and making sure there are no critical events in the report. You can also troubleshoot an Archiver by searching for important events, such as Disk load threshold exceeded or Cannot write to any drive, and see when those events occurred.

Procedure

  1. From the home page, open the Archiver events task.
  2. Set up the query filters for the report. Choose from one or more of the following filters:
    Archiver
    Select the Archivers you want to investigate.
    Custom fields
    Restrict the search to a pre-defined custom field for the entity. This filter only appears if custom fields are defined for the entity, and if the custom field was made visible to you when it was created or last configured.
    Events
    Select the events of interest. The event types available depend on the task you are using.
    Event timestamp
    Define the time range for the query. The range can be defined for a specific period of time or for global units of time such as the previous week or the previous month.
    Description
    Restrict the search to entries that contain this text string.
  3. Click Generate report.

    The Archiver events are listed in the report pane.