Events Pane
    • Dark
      Light
    • PDF

    Events Pane

    • Dark
      Light
    • PDF

    Article Summary

    The Events pane provides a real-time aggregation display of selected events from your managed machines.

    Add an Event Log

    By default, Application and System logs are displayed in the Events pane. You can only add event logs if they are listed in PowerShell. To view the log list, open an elevated PowerShell prompt and run the following command:

    [System.Diagnostics.EventLog]::GetEventLogs()
    

    To add an event log:

    1. Right-click the All Events folder and select Add an Event Log.
      image.png

    2. Provide the log name exactly as it appears in the Windows Event Viewer. In our example, we add the log name "Microsoft-Windows-AppModel-Runtime/Admin" that resides under the Applications and Services Logs.
      image.png

      Limitation

      Only administrative logs are supported. Operational logs can't be displayed.

    Supported Event Types

    The following event types can be displayed in the Events pane:

    • Error events
    • Warning events
    • Failure Audit events

    Retention Period

    By default, events are preserved in the Events pane for a retention period of 60 minutes. You can configure this value by clicking the Event button in the Settings ribbon. Under the Performance tab you can set the prefered value
    image.png

    The following actions are available when right-clicking on events:

    Filtering Events

    Using the Events Settings button from the Home ribbon (or the Events button in the Settings window), you can configure parameters according to which the events will be displayed. The following filtering methods are available:

    image.png

    • Excluded Events - by adding an Event Log Filter Rule here, you are setting a condition which, if matched, will cause the event to be ignored. For example, setting a rule which specifies Event ID 33 will drop all future events with the ID number 33 from the Real-Time Console.
    • Event type - You can choose to ignore errors, warnings, and/or audit failure events.
    • Frequent Events Filter - By default, ControlUp is configured to ignore events that appear repeatedly for a configured amount of times during the event retention period. The default value is 100, so by default, an event that appears a hundred times within an hour will fall under the Frequent Events Filter category and will no longer be reported. You will see a pop-up notification in the left bottom corner of the ControlUp Real-Time Console when an event reaches this threshold. You can hide this notification by using the Disable Frequent Event Filter Notifications checkbox.
    Note

    If you turn off the default Frequent Event Filter, your ControlUp Real-Time Console may accumulate a large number of events, which may dramatically increase the amount of RAM consumed by the console process. You may mitigate this condition by clearing events or by decreasing the Event Retention Period.

    The above filtering mechanisms only affect future events. To remove unneeded events from the current view, use the Clear or Clear All buttons in the Home ribbon of the Events Pane
    image.png

    • Performance - You can set the rentention period in minutes for which the events remain displayed in the Events Pane.

    Event Actions

    Right-click an event to see the possible actions that you can perform on the selected event:
    image.png

    Add to filter

    The selected event details will be used to create a new filter rule to prevent similar events from appearing in the Events pane. You will be presented with a configuration window in which you will be able to customize the rule before applying it.
    image.png

    Remove from this view

    The selected event(s) will be removed from the current view. This will not prevent similar events from appearing in the Events pane in the future.

    Search In: (Google, EventID, Microsoft TechNet)

    Right-click an event and select Search In to search for more event details in selected search engines. You need Internet connectivity on the console machine. This feature is not supported for on-premises version of ControlUp.
    The event details are automatically populated in the wizard.
    image.png

    Click Yes to open your default browser and the search is completed.
    image.png

    Remote Desktop to machine

    Use this action to switch to the Remote Desktop pane and establish a Remote Desktop connection to the machine from which the selected event originated.

    Launch Event Viewer

    This action opens the Event Viewer remotely to the machine of the selected event.

    Note

    This action requires RPC access to the managed machines(s) and administrative privileges on these machines(s). You might not be able to display the events on machines that do not meet these prerequisites.

    Add Trigger

    You can create a new incident trigger based on the selected event. This creates a Windows Event trigger.

    1. Right-click the event and select Add Trigger. The Edit Trigger window appears
      image.png
    2. In the Edit Trigger window, define a new Trigger name and keep the pre-configured. Click Next to see the trigger configuration
      image.png
    3. ControlUp creates the filter criteria automatically. If you want to edit additional filter criteria, click Filter editor... in the right corner or click Next to proceed with the trigger configuration
      image.png
    4. Define the scope for which you want to apply the trigger and click Next
    5. Create follow-up actions you want to run if the trigger conditions are met. Click Finish to complete the trigger configuration.
    6. The new trigger is now shown in the trigger list
      image.png

    Was this article helpful?

    What's Next