Events Pane
  • Dark
    Light
  • PDF

Events Pane

  • Dark
    Light
  • PDF

The Events pane provides a real-time aggregation display of selected events from your managed computers.

Add an Event Log

By default, Application and System logs are displayed in the Events pane.

  1. Right-click the All Events folder and select Add an Event Log
    image.png

  2. Provide the log name exactly as it appears in the Windows Event Viewer. In our example, we add the log name "Microsoft-Windows-AppModel-Runtime/Admin" that resides under the Applications and Services Logs.
    image.png

    Limitation

    Only administrative logs are supported. Operational logs can not be displayed.

Supported Event Types

The following event types can be displayed in the Events pane:

  • Error events
  • Warning events
  • Failure Audit events

Retention Period

By default, events are preserved in the Events pane for a retention period of 60 minutes. You can configure this value by clicking the Event button in the Settings ribbon. Under the Performance tab you can set the prefered value
image.png

The following actions are available when right-clicking on events:

Filtering Events

Using the Events Settings button from the Home ribbon (or the Events button in the Settings window), you can configure parameters according to which the events will be displayed. The following filtering methods are available:

image.png

  • Excluded Events - by adding an Event Log Filter Rule here, you are setting a condition which, if matched, will cause the event to be ignored. For example, setting a rule which specifies Event ID 33 will drop all future events with the ID number 33 from the Real-Time Console.
  • Event type - You can choose to ignore errors, warnings, and/or audit failure events.
  • Frequent Events Filter - By default, ControlUp is configured to ignore events that appear repeatedly for a configured amount of times during the event retention period. The default value is 100, so by default, an event that appears a hundred times within an hour will fall under the Frequent Events Filter category and will no longer be reported. You will see a pop-up notification in the left bottom corner of the ControlUp Real-Time Console when an event reaches this threshold. You can hide this notification by using the Disable Frequent Event Filter Notifications checkbox.
Note

If you turn off the default Frequent Event Filter, your ControlUp Real-Time Console may accumulate a large number of events, which may dramatically increase the amount of RAM consumed by the console process. You may mitigate this condition by clearing events or by decreasing the Event Retention Period.

The above filtering mechanisms only affect future events. To remove unneeded events from the current view, use the Clear or Clear All buttons in the Home ribbon of the Events Pane
image.png

  • Performance - You can set the rentention period in minutes for which the events remain displayed in the Events Pane.

Event Actions

Right-click an event to see the possible actions that you can perform on the selected event:
image.png

Add to filter

The selected event details will be used to create a new filter rule to prevent similar events from appearing in the Events pane. You will be presented with a configuration window in which you will be able to customize the rule before applying it.
image.png

Remove from this view

The selected event(s) will be removed from the current view. This will not prevent similar events from appearing in the Events pane in the future.

Search In: (Google, EventID, Microsoft TechNet)

Right-click an event and select Search In to search for more event details in selected search engines. You need Internet connectivity on the console machine. This feature is not supported for on-premises version of ControlUp.
The event details are automatically populated in the wizard.
image.png

Click Yes to open your default browser and the search is completed.
image.png

Remote Desktop to machine

Use this action to switch to the Remote Desktop pane and establish a Remote Desktop connection to the computer from which the selected event originated.

Launch Event Viewer

This action opens the Event Viewer remotely to the machine of the selected event.

Note

This action requires RPC access to the managed computer(s) and administrative privileges on these computer(s). You might not be able to display the events on computers that do not meet these prerequisites.

Add Trigger

You can create a new incident trigger based on the selected event. This creates a Windows Event trigger.

  1. Right-click the event and select Add Trigger. The Edit Trigger window appears
    image.png
  2. In the Edit Trigger window, define a new Trigger name and keep the pre-configured. Click Next to see the trigger configuration
    image.png
  3. ControlUp creates the filter criteria automatically. If you want to edit additional filter criteria, click Filter editor... in the right corner or click Next to proceed with the trigger configuration
    image.png
  4. Define the scope for which you want to apply the trigger and click Next
  5. Create follow-up actions you want to run if the trigger conditions are met. Click Finish to complete the trigger configuration.
  6. The new trigger is now shown in the trigger list
    image.png

Was this article helpful?