Investigating Archiver events - Security Center 5.8

Security Center Administrator Guide 5.8

series
Security Center 5.8
revised_modified
2020-08-17

You can search for events related to archiving roles (Archiver and Auxiliary Archiver) using the Archiver events report.

What you should know

You can check the status of an Archiver by selecting it, setting the time range to one week, and making sure there are no critical events in the report. You can also troubleshoot an Archiver by searching for important events, such as Disk load threshold exceeded or Cannot write to any drive, and see when those events occurred.

Procedure

  1. From the home page, open the Archiver events task.
  2. Set up the query filters for the report. Choose from one or more of the following filters:
    Archiver
    Select the archiving roles (Archiver and Auxiliary Archiver) you want to investigate.
    Event timestamp
    Define the time range for the query. The range can be defined for a specific period or for global time units, such as the previous week or the previous month.
    Events
    Select the events of interest. The event types available depend on the task you are using.
    Custom fields
    Restrict the search to a predefined custom field for the entity. This filter only appears if custom fields are defined for the entity, and if the custom field was made visible to you when it was created or last configured.
  3. Click Generate report.
    The Archiver events are listed in the report pane.