• Console UI

    These are the main components of the console’s user interface:

    Ribbon Bar

    File Menu

    Clicking on the “File” button in the top left corner of the screen allows you to select the following functions

    SETTINGS

    Opens the Settings Window

    ACCOUNT MANAGEMENT

    This window allows you to manage common account information such as name, mobile phone number (for alerting), activation status, changing your password, etc.

    MINIMIZE

    Switches to tray mode, during which the main window is hidden. System tray bubble notifications may still be displayed, according to your settings.

    SIGN OUT/SIGN IN

    Sign Out terminates your current ControlUp session and switches to the sign in screen. If you are currently disconnected from the login servers, the “Sign In” option will be shown. The “Sign In” option may also be displayed briefly after you sign into ControlUp with the “Save Password” option enabled.

    SAVE CONFIGURATION

    Immediately saves the configuration. Especially useful for customers who work in offline/standalone mode and need to commit changes to the configuration before exiting the console.

    EXIT

    Terminates your current ControlUp session and closes the executable.

    Home Ribbon

    Here you will find a set of ribbons which include all the actions you will need when working with ControlUp. The buttons on the Home ribbon vary according to the current view and selected objects, while the Settings ribbon and the Help ribbon remain static regardless of the current view.

    Settings Ribbon

    For more information on ControlUp Settings, please refer to The Settings Window chapter.

    Help Ribbon

    Includes various help options.

    Navigation Bar

    Here you can switch between views, navigate between the recently visited views, and enter search queries for the Information Grid.

    RealTime Grid

    The main information display area of the console. This high-performance component can quickly display, sort, group, and filter real time information collected from the managed computers.

    Monitors Panel

    In this area you will see the status of all installed instances of ControlUp Monitor service in your organization. For more information on ControlUp Monitor please refer to this chapter.

    Panes

    The Outlook-style menu on the bottom left allows you to switch between panes, each of which deals with a distinct area of ControlUp’s functionality.

    Actions Panel

    Here you can find all of the available actions for the objects you select on the information grid. The actions available on the Actions Panel are also accessible by using the context menu (right-click) of the selected resource.

    Organization Tree

    A graphical display of all the computers currently added to the console, arranged in folders. There are two methods for managing the tree: right-clicking computers or folders, or by using the Folder area of the Home Ribbon.

    In Enterprise Mode, your tree is shared with other ControlUp users on your team so that all changes made to the tree are replicated automatically between all team members with appropriate permissions.

    For more information regarding ControlUp’s permission delegation capabilities, please refer to the Security Policy Pane chapter.

    In Standalone Mode, every ControlUp user manages a separate Folder Tree which is stored in XML format in the “%appdata%ControlUp” folder of the user profile. These settings can be copied between users but cannot be synchronized automatically. Your stored passwords are stored in an encrypted form and will not be accessible to any other user, even if you copy this folder.

    Status Bar

    The status bar is a dynamic display that includes the following information regarding your current ControlUp session:

    • User Name – your current ControlUp username which you provided when signing in, or a shortened unique derivative of your email address, which can be used for login.
    • Organization – the name of your current ControlUp organization
    • Status – the following values are possible:
      • Online – you are signed in using ControlUp Hybrid Cloud
      • Offline – you are signed in using an Offline License File
      • Logging in – displayed briefly following login if “Save Password” is enabled
    • Central Configuration connection status:
      • Connected –Indicates an active connection to the ControlUp Hybrid Cloud.
      • Connected (with errors) – displayed when some of the changes could not be committed to the ControlUp Hybrid Cloud.
      • Disconnected – in Offline Mode, or when communications with Cloud Configuration Servers are disrupted.
  • My Organization Pane

    The Information Grid is ControlUp’s primary source of information. As such, it is worth spending a few minutes configuring the Information Grid display to your needs.

    Selecting Displayed Columns

    In order to add or remove columns, click on the “Columns” button on the Ribbon Bar. After selecting the desired columns, you can drag and drop the column headers to arrange the data in a way that best suits your needs.

    Note: In the Computers View, the displayed columns are grouped into presets. Whenever you add or remove a column, you are affecting the currently active preset. For more information on column presets please refer to the Column Presets section below.

    Column Presets

    The Computers View includes more than 70 information columns displaying various system data, performance counters, statuses and other important information. Many of these columns are generic and applicable to any type of computer (e.g. CPU utilization or Disk Free Space). However, many of the columns supported by ControlUp are specialized, and are only useful if the displayed computers are running a certain software package.

    Column presets allow you to configure which columns will be displayed for every type of resource you are monitoring. Every folder in the organization can be configured with a column preset which will determine which columns will be displayed when computers in this folder are the only ones displayed in the Computers View. There are two ways to achieve this result:

    1. By focusing on a folder (right-click > Focus in the organization tree). This operation filters all of ControlUp’s records (Sessions, Processes, Accounts and Executables) to include only those resources that reside in the folder on which you have focused.
    2. By drilling into a folder (double-click on a folder record in the Folders View). This operation displays computers residing in the folder you double-clicked, but does not filter other ControlUp views (Sessions, Processes, Accounts and Executables)

    While in the Computers View, you can change the current column preset by clicking on the Columns button menu:
    11.png

    This selection determines the currently displayed columns, but is not saved when you navigate to a different folder or view in ControlUp.

    In order to configure a permanent preset for a folder, use the folder properties. When a new folder is created in ControlUp, it inherits the column preset from its parent folder. Unless otherwise specified, the Default preset is used on the root folder, and is inherited by any child folders you create. After creating a folder, you can right-click it and click Properties, and then select a suitable column preset from the drop-down list. You can also create a new column preset by clicking the “Manage Presets” button near the drop-down list.

     

     

    To create a new preset, choose your selected columns and click on the “Save” button to configure a name for your new preset. From now on, you will be able to select this preset using the Columns drop-down menu or using any folder’s properties.

    Column presets reside in your organization’s public configuration. This means that by changing a column preset you are affecting all other ControlUp users in your organization. However, also note that the order and size of displayed columns is still a private preference, so in case you and your colleagues would like to see different columns in the same preset, just add all the columns you need to the same preset and let every colleague arrange the columns so that only relevant ones are visible.

    Sorting the Information Grid

    The data in the Information Grid can be sorted by any displayed column. Click a column’s header to sort the Information Grid by that column. Click again to change the sorting order. The information grid can also be sorted by multiple columns. To do so, press and hold the Ctrl button while clicking the column headers.

    Searching the Information Grid

    You can search the Information Grid using the Search text box on the right side of the Navigation Bar. The Information Grid will be filtered automatically as you type your search term. It is important to understand that the Search text box looks for the search terms only in a single column, depending on your current view. For example, if you type “Steve” in the Search box while in the Sessions view, the Information Grid will display only those sessions where the “User” field contains “Steve” as a substring.

    Multiple search terms can be entered, separated by “|” (pipe) which serves as a logical OR operator. For instance, when typed in the search text box in the Sessions View, “Steve|John|Mark” will filter the sessions table to include all sessions owned by users with either “Steve”, “John” or “Mark” in their names. (Read more here). When finished searching, click on the X button in the Search box to clear the filter. If not cleared manually, the Search box remembers the search terms for each of ControlUp’s views.

    Column Grouping

    In order to obtain an even more convenient display of your resources, you should try grouping the data in the Information Grid by different columns. To do so, turn on the “Enable Grouping” checkbox on the Display Settings menu of the Home Ribbon. Now you can drag any column to the grouping bar that appears between the Information Grid and the Navigation bar. This can be useful for distinguishing between servers from different vendors or separating active user sessions from disconnected ones. Grouping settings are discarded when you close the console.

    Exporting Data from the Information Grid

    ControlUp console allows you to export the data currently displayed in the Information Grid by clicking the Export button in the Ribbon Bar. The supported export format is XLS (Microsoft Excel). Your column settings and grouping configurations will be preserved in the exported document.

    Scheduled Export

    Using ControlUp, you can schedule a periodic automatic export of data from the information grid to a CSV file. To configure your automatic export settings, go to the Settings Window using the File Menu or the Settings ribbon and select “Export Schedule”. Configure your export settings by adding an export configuration and selecting the source view, time interval and destination to the target file. Please take into account the size of the views you are exporting when planning storage capacity for the export folder.

  • Remote Desktop Pane

    The Remote Desktop pane of ControlUp serves as a remote connections manager, using the same folder hierarchy you created in the "My Organization" pane. ControlUp switches to this pane every time you invoke the “Remote Desktop” action from the “My Organization” pane. Besides connecting to computers that belong to your organizational hierarchy, you can also create private RDP connections as outlined below.

    Configuring Remote Desktop Connections.

    By default, the Remote Desktop pane contains an RDP connection object for every computer you have connected to using the "My Organization" pane. New connections can be added by right-clicking a folder and selecting “Add > RDP Connection” or by using the “Add Connection” button on the Command Bar.
    1.png

    Private vs. Public RDP Connections

    When working in Enterprise Mode, RDP connections you create under the root folder named after your ControlUp organization are automatically replicated to your colleagues, just like machines you add in the “My Organization” pane. If you would like to remember an RDP connection for yourself only, create it under the “My RDP Connections” folder. Connections created in this folder are private and do not get replicated.

    When working in Standalone Mode, all RDP connections you create are always private, just like computers you add to the tree in the “My Organization” pane.

    Every connected computer in the "My Organization" pane has a corresponding RDP connection object in the Remote Desktop pane. The opposite, however, is not necessarily true. When an RDP connection is created manually in the Remote Desktop pane, no changes are made to the "My Organization" pane. Therefore, you should manually create RDP connections if you don’t want (or cannot) connect to these computers using ControlUp. You can also create several connections to the same computer (e.g. with different credentials or using different display settings) using the Remote Desktop pane.

    Connection Properties Inheritance

    RDP connection objects are configurable in a way similar to Microsoft Remote Desktop Connection (mstsc.exe). By default, all RDP connections in this pane inherit their settings from their parent folder. Therefore, if you configure and save your connection credentials in the properties of a folder in the hierarchy, you will be able to establish all of the child RDP connections without entering your password again. To do so, right-click a folder in the hierarchy, click Properties and then select saved credentials set using the drop-down menu. If this menu is unavailable, clear the “Inherit settings from parent folder” checkbox.

    When established, every RDP connection opens a new tab in the Remote Desktop pane. You can switch between these tabs and close them to disconnect active sessions. The “Connections” tab is always available in the Remote Desktop pane. In this tab, you may sort, search, group, and edit your RDP connections in a grid view similar to the grid used in the “My Organization” pane.

  • Controllers Pane

    The Controllers Pane is an advanced management interface which allows system administrators to handle multiple computers simultaneously while comparing and managing the Windows registry, services, file system, and installed software. If you need to investigate an irregularity or a misconfiguration, Controllers offer a unique aggregated view of your computers and allow you to manage many computers with the ease of managing a single one.

    The following Controllers are available:

    2.png

    • Registry Controller – for comparing and managing the Windows Registry on multiple computers or user sessions simultaneously.
    • Services Controller – for comparing and managing the Windows Services on multiple computers simultaneously.
    • File System Controller – for comparing and managing files and folders from the perspective of multiple managed computers or user sessions simultaneously.
    • Programs and Updates Controller – for comparing installed programs on multiple computers.
    • Shares Controller – for comparing and managing files on shared folders in your enterprise (not necessarily on computers already managed by ControlUp).

    Registry Controller and Programs and Updates Controller may reference either computers or user sessions, depending on your selection in the Controllers tree on the left. Both of these types of instances are called Targets. Services Controller and File System Controller only reference computers (since user sessions do not have their own Services or File System) and Shares Controller references UNC paths on file servers in your organization.

    Exporting Results from the Controllers Pane

    The Export to Excel button located on the Home ribbon of the Controllers pane enables you to export the comparison results into an XLSX file. Only the rightmost Results is exported.

    Controllers Lists

    Controllers allow you to save lists of managed computers for future reuse. User session lists cannot be saved since they are temporary and volatile. For example, you might save a list of file servers which you frequently check for irregularities or differences. These lists are managed using the “Manage Lists” button:

    mceclip0.png

    Services Controller

    The Services Controller is an advanced utility that enables controlling Windows services on a remote computer or on multiple computers simultaneously. If you select multiple computers and launch the Services Controller, you will be presented with an aggregated view of the services from all of the selected computers.

    The system services can then be browsed in a way similar to the standard Windows Services console. In order to emphasize the differences between the services configurations of different computers or users, the Services Controller uses the following color-coded icons:

    4.png

    In the Comparison Charts area on the right side of the Services Controller you can view the details of the differences listed above, for example, the state of the selected services on the target computers.

    Adding Operation Targets

    You can add targets to the ControlUp Services Controller by using the “Add Target” button in the menu bar. You can only add computers that are currently connected to ControlUp.

    Removing Operation Targets

    In order to remove a computer from the Controller view, right-click the computer in the “Computers” panel and select “Remove”.

    Search Services

    Services Controller allows searching the selected computer(s) for services with a specified name by using the Search button in the toolbar.

    Services Actions

    The Services Controller allows you to start, stop and modify Windows Services just like you would using the Services MMC snap-in.

    If you select a service in the rightmost grid of the controller, your action will affect a single service instance on one computer. If you select a service in the middle panel, the action will ask you which of the computers you would like to be affected. The following management actions are available by right-clicking a service or by using the Actions button on the Ribbon Bar:

    Start Service

    Starts the selected service(s) on the target computer(s).

    Stop Service

    Stops the selected service(s) on the target computer(s).

    Pause Service

    Pauses the selected service(s) on the target computer(s).

    Edit Service Properties

    Enables batch modification of service(s) properties on the target computers. Using this action, you can modify the start type and logon information for a service or multiple services at once on multiple computers.

    Registry Controller

    The Registry Controller is an advanced utility that enables viewing and editing the registry on multiple computers simultaneously. If you select multiple computers and launch the Registry Controller, you will be presented with an aggregated view of the HKEY_LOCAL_MACHINE hives from all of the selected computers.

    If you select multiple user sessions and launch the Registry Controller, you will be presented with an aggregated view of the HKEY_CURRENT_USER hives from all of the selected sessions.

    The registry tree can then be browsed in a way similar to the standard Windows Registry Editor. In order to emphasize the differences between the registry configurations of different computers or users, the Registry Controller uses the following color coded icons:

    In the Comparison Charts area on the right side of the Registry Controller you can view the details of the differences listed above, for example the data of the same registry value on different computers.

    Adding Targets

    You can add targets to the ControlUp Registry Controller by using the “Add Target” button in the menu bar. The “Add Target” wizard will guide you through the process of adding computer or user hives to the Controller.

    The Registry Controller is capable of managing the following targets:

    1. HKEY_LOCAL_MACHINE hives of the computers connected in ControlUp console

    2. User Profiles currently loaded on the computers connected in ControlUp console

    Note: Only targets of the same kind can be added to the Controller simultaneously. In other words, user hives cannot be compared to computer hives.

    Removing operation targets

    In order to remove a hive from the Controller view, right-click the computer/user in the “Computers” or “Users” panel and select “Remove”.

    Search Registry

    With ControlUp’s Registry Controller you can search the registry on selected computer/user hives using configured search pattern. Expand the Targets pane to select individual targets for this operation.

    Registry Actions

    The Registry Controller allow you to manipulate the Windows Registry just like you would using Windows Registry Editor (regedit.exe).

    If you select a registry value or a key in the rightmost grid of the controller, your action will affect a single target’s registry. If you select a service in the middle panel, the action will ask you which of the targets you would like to be affected. The following management actions are available by right-clicking a registry key or value or by using the Actions button on the Ribbon Bar:

    Create Key

    Creates a key with the specified name in the selected computer/user hives. Expand the Targets pane to select individual targets for this operation.

    Delete Key

    Deletes the selected key in the selected computer/user hives. Expand the Targets pane to select individual targets for this operation.

    Rename Key

    Renames the selected key in the selected computer/user hives. Expand the Targets pane to select individual targets for this operation.

    Copy/Move Key

    Copies or moves a key within the selected computer/user hives. For example, you can copy the SoftwarePolicies key to SoftwarePolicies_old in order to create a backup of this key. Copying keys and values between computers is supported using the Distribute action (see below). Expand the Targets pane to select individual targets for this operation.

    Distribute

    Copies or moves a key within between computer/user hives. You can copy a key from one computer to another or to multiple computers, or from a single user’s hive to one or more other users’ hives. Expand the Targets pane to select the source and target/s for this operation.

    Create Value

    Creates a value with specified type, name and data on the selected computer/user hives. Expand the Targets pane to select individual targets for this operation.

    Delete Value

    Deletes the selected value in the selected computer/user hives. Expand the Targets pane to select individual targets for this operation.

    Rename Value

    Renames the selected value to the configured name in the selected computer/user hives. Expand the Targets pane to select individual targets for this operation.

    Modify Value Data

    Modifies the selected value’s type and name in the selected computer/user hives, while overwriting all existing data in the selected value. Expand the Targets pane to select individual targets for this operation.

    File System Controller

    The File System Controller is an advanced utility that enables viewing and manipulating the local file system on a remote computer or on multiple computers simultaneously.

    If you select multiple computers and launch the File System Controller, you will be presented with an aggregated view of the local fixed drives from all of the selected computers. Network drives and removable media are not displayed.

    The file system tree can then be browsed in a way similar to the standard Windows Explorer. In order to emphasize the differences between the file systems of different computers, the File System Controller uses the following color coded icons:

    In the rightmost grid of the File System Controller you can view the details of the differences listed above, for example information about files in the same directory on different computers.

    Note: Please note that the File System Controller presumes files with same name, attributes, size and modification time are identical. You should not rely on the File System Controller to compare the contents of the files.

    Adding Operation Targets

    You can add targets to the ControlUp File System Controller by using the “Add Target” button in the command bar. The “Add Target” window will guide you through the process of adding your operation target(s).

    Removing Operation Targets

    In order to remove a computer from the Controller view, right-click the computer in the “Computers” panel and select “Remove”.

    File System Controller Folder Actions

    Actions available in the File System Controller allow you to manipulate files and folders using the selected computer(s). All file actions are carried out on the target computer, which means that the paths and filenames you provide must be valid ON the target computer.

    All Files actions are performed using the Local System account on the target computer. This is a highly privileged account so you are unlikely to encounter a permissions issue when performing local file operations. However, make sure to provide valid domain credentials when using network (UNC) paths or network drives, since the Local System account does not have access to the network.

    The following actions are available when right-clicking a folder in the “Folders” area:

    Create Folder – Creates a folder in the selected path on all selected computer

    Delete Folder – Deletes the selected folder and all its contents on all selected computer

    Rename Folder – Renames the selected folder on all selected computers

    Copy/Move Folder – Performs a local copy or move operation on the selected folder within all of the selected computers. Please note that during this operation no data is copied between computers.

    Send Files Here – Copies files or folders from your management computer or a network location to the specified folder on all selected computers.

    Gather – Copies the selected folders from all of the selected computers to a specified location, while prepending the folder names with source computer names.

    Edit Folder Attributes – Toggles the “Hidden” folder attribute on all of the selected computers.

    Permissions > Add – Adds an Access Control Entry for a specified account to the security descriptor of the folder on all selected computers.

    Permissions > Revoke – Removes an Access Control Entry for a specified account from the security descriptor of the folder on all selected computers.

    Permissions > Replace – Modifies Access Control Entries for the specified account in the security descriptor of the folder on all selected computers.

    Permissions > Migrate – Replaces occurrences of a specified account with another account in the security descriptor of the folder on all selected computers

    Set Owner – Modifies the NTFS folder ownership on all selected computers

    Folder Size – Calculates the sizes of all instances of the selected folder on all selected computers.

    Refresh – Reloads the aggregated directory content data for the selected folder

    File System Controller File Actions

    The following actions are available when right-clicking files in the “Files” area:

    Delete File – Deletes the selected file(s) on all selected computers

    Rename File – Renames the selected file on all selected computers

    Copy/Move File – Performs a local copy or move operation on the selected file within all of the selected computers. Please note that during this operation no data is copied between computers.

    Edit File Attributes – Toggles the “Archive”, “Read Only” and “Hidden” file attributes on all of the selected computers.

    Gather – Copies the selected files from all of the selected computers to a specified location, while prepending the file names with source computer names.

    Set Owner – Modifies the NTFS file ownership on all selected computers

    Permissions > Add – Adds an Access Control Entry for a specified account to the security descriptor of the file on all selected computers.

    Permissions > Revoke – Removes an Access Control Entry for a specified account from the security descriptor of the file on all selected computers.

    Permissions > Replace – Modifies Access Control Entries for the specified account in the security descriptor of the file on all selected computers.

    Permissions > Migrate – Replaces occurrences of a specified account with another account in the security descriptor of the file on all selected computers

    Refresh – Reloads the aggregated directory content data for the selected folder

    Programs and Updates Controller

    The Programs and Updates Controller is an advanced utility that enables viewing a list of installed software and updates on multiple computers simultaneously. If you select multiple computers and launch the Programs and Updates Controller, you will be presented with an aggregated view of the software packages and updates from all of the selected computers.

    Installed programs and updates can be browsed in a way similar to the standard Windows “Programs and Features” or “Add/Remove Programs” control panel applet. In order to emphasize the differences between software installed for different computers or users, the Programs and Updates Controller uses the following color-coded icons:

    The “Programs” folder in the middle panel includes an aggregated view of installed software, while the “Updates” folder includes updates for the Operating System and third-party components. You may use the Search button in the Ribbon Bar to search for programs and compare the results in the rightmost panel of the Controller.

    Currently, the Programs and Updates Controller does not support management actions and only includes read functionality.

    Shares Controller

    The Shares Controller is functionally similar to the File System Controller and includes the exact same management actions. The major difference is in the fact that the Shares Controller references UNC paths (in the form of servernamesharename), while the File System Controller references local file system paths on computers managed by ControlUp. This difference influences the operation of the Shares Controller in two aspects:

    1. You can add any file system path to the Shares Controller, as long as it is accessible to you. The share paths need not be located on computers that you added to ControlUp. They can be located on any SMB-compatible file server or workstation capable of sharing folders for Windows.
    2. In the Shares Controller, all available management actions are performed by the ControlUp console, while the File System Controller performs most of the actions in the context of the managed computers.
  • Incidents Pane

    ControlUp’s Incidents Pane is a viewer for incidents that were recorded in your organization based on incident triggers. Using this pane you can conduct retrospective investigations on various incidents, such as changes in Stress Level, user activity, Windows Events, and more. Every incident is recorded based on a trigger configured in ControlUp, either manually or with the help of ControlUp Hybrid Cloud Analytics, generates an incident whenever its conditions are met. Regardless of the follow-up actions you may configure (e.g. send an e-mail alert), ControlUp will always record the incident in a database for later retrieval. The Incidents Pane is the place where all incidents can be searched, sorted and grouped for trending analysis and troubleshooting purposes.

    A few important clarifications for an easy start with the Incidents Pane:

    • The Incidents Pane is not available in Offline Mode. Offline users of ControlUp will see the Incidents Pane button as greyed out (this will also happen briefly following Fast Login).
    • Incident triggers are configured using the Triggers Settings window. That’s the place where you can control which incidents will be recorded by ControlUp.
    • The Incidents Pane is read-only and intended for viewing the incidents and performing data analysis by filtering, sorting and grouping data.
    • The default retention period for incidents is 14 days and every organization is limited to 1000 incidents per day by default. Please contact us if you feel like these are not enough for your organization.
    • Incidents are stored securely using ControlUp Hybrid Cloud Services, subject to ControlUp privacy policy.

    Searching and Filtering the Incidents Grid

    Here are some ways in which you can use the incidents grid in order to locate interesting data:

    • The Filter / Search box locates incident records by searching all data fields (try computer names, user names or any other strings that might appear in the incidents, like parts of a Windows Event text).
    • Each row in this grid can be double-clicked to focus on a specific incident type. You can always come back to the home page by clicking on the Home button or by clicking on Back (<) on the navigation bar.
    • The time range slider can be adjusted to display events that happened during a specified time range.
    • Click a folder or a computer in the organization tree to show incidents for that folder or computer.

    All of the filtering options above instantly affect the information grid, causing it to recalculate the distributions. If the grid is filtered by any of those methods, the navigation bar will be highlighted in orange until all filters are cleared.

    The Incidents Home Page

    The Incidents home page is an information grid showing all available incident categories, along with their distribution over time. Its purpose is to provide a summary of incident history in your ControlUp organization. Every row in this grid represents a distinct incident category, like “Computer Stress” or “Windows Event”. Events are separated into these categories because every category has a distinct set of data fields. For example, a “Computer Stress” incident cannot be displayed in the same table as a “Session State Changed” incident since they do not have the same properties.

    The Incidents home page includes the following columns:

    • Graph column – shows the relative distribution of every event type over time, during the retention period (14 days by default). The leftmost bar in each graph represents the number of incidents logged on the first day of this period, and the rightmost bar represents the number of events logged today. By default, the graph is sorted by this column, which makes the most populated incident categories to appear on top.
    • Incident type – the incident category name.
    • Last incident on – the time of the last incident recorded in this category
    • Last hour, Last day, Last X days (14 by default) – a count of incidents within the category for the respective time frame.

    In order to research incidents in a particular category, double click that category’s row.

    Incidents Category View

    After double-clicking any row in the Incidents home page, you arrive at this view, which shows all incidents of the selected type (for example, Computer Stress). Please note that any filters previously applied on the Incidents home page will remain active, as indicated by the orange highlight of the navigation bar.

    This view includes the same columns as the Incidents home page. In addition, all data fields of the selected incident type are available for display. To add a column, click on its name in the side bar on the right.

    For example, here we’ve added the “Counter” column to the Computer Stress incidents view. Once added, this column is added to the grouping logic of the incidents grid, dividing it into all unique combinations of the selected field values. If you originally had 10 computers in the Computer Stress view, adding the “Stress Level” column will divide every computer row into all existing values of Stress Level column on that computer (to a maximum of 10*4=40 rows, if every computer has triggered all possible stress levels).

    Multiple columns can be added using the same method. This is a powerful data mining feature, which enables you to identify the most common factors contributing to incidents in your organization. For instance, in Computer Stress Level events the “Counter” column shows the specific counters responsible for each Stress Level incident. When added to this view together with the “Computer Name” column, the default sorting should highlight the specific resource that causes the most Stress Level events (e.g. Memory Utilization on Server1).

    Double-clicking on a row in this table will switch the grid to the Individual Incidents view.

    Individual Incidents View

    This view’s purpose is to display the separate occurrences of any incident recorded by ControlUp. Unlike the other views in the Incidents Pane, every row in this view is not a summary, but an individual incident.

    For every incident, all recorded details are displayed (see column reference below). In addition, this view includes the “Trigger” column which links to the trigger that caused every incident to be recorded, so that you can easily tune the relevant incident triggers. Please note that the trigger causing a particular event may have been deleted since the incident had been recorded. In this case the “Trigger” column will show “<trigger deleted>”.

    Incidents Pane Column Reference

    Home Page Columns

    Column name Description
    Incident type The incident category, as configured when creating the incident trigger.
    Last incident on The time of the last incident recorded in this category.
    Last hour, Last day, Last X days (14 by default) A count of incidents within the category for the respective time frame.

    Incidents Category View Columns

    Column name Description
    Incident type The incident category, as configured when creating the incident trigger. Events are separated into these categories because every category has a distinct set of data fields. For example, a “Computer Stress” incident cannot be displayed in the same table as a “Session State Changed” incident since they do not have the same schema.
    Last incident on The time of the last incident recorded in this category.
    Last hour, Last day, Last X days (14 by default) A count of incidents within the category for the respective time frame.
    Columns available in the “Folder Stress” category
    Stress Level The Stress Level severity recorded during the incident
    Folder The name of the folder in your ControlUp organization
    Trigger The name of the trigger that caused the incident to be recorded (links to the trigger’s settings). Could be empty if the trigger has been deleted.
    Counter Name The ControlUp column responsible for the increase in the computer’s Stress Level
    Columns available in the “Hosts Stress” category
    Stress Level The Stress Level severity recorded during the incident
    Folder The name of the folder in your ControlUp organization
    Trigger The name of the trigger that caused the incident to be recorded (links to the trigger’s settings). Could be empty if the trigger has been deleted.
    Counter Name The ControlUp column responsible for the increase in the computer’s Stress Level
    Host Name The name of the affected virtualization host
    Hypervisor Type The hypervisor platform vendor
    Version The version number of the hypervisor platform
    Installed Memory The amount of physical RAM installed on the host
    Columns available in the “Computer Stress” category
    Computer The name of the computer on which the incident has occurred
    Folder The name of the ControlUp organization tree folder in which the computer resides
    Trigger name The name of the trigger that caused the incident to be recorded (links to the trigger’s settings). Could be empty if the trigger has been deleted.
    Manufacturer The hardware manufacturer of the stressed computer
    Model The hardware model of the stressed computer
    OS The operating system of the stressed computer
    Service Pack The OS service pack installed on the stressed computer
    Counter The ControlUp column responsible for the increase in the computer’s Stress Level
    System Type The system bitness (x86/x64) of the stressed computer
    CPU Count The number of CPUs installed on the stressed computer
    Total Memory Installed The amount of physical memory on the stressed computer
    Uptime Group The uptime of the stressed computer, categorized (1 hour – 1 day, 1 day – 1 week, 1 week – 1 month)
    Stress Level The Stress Level severity recorded during the incident
    Session Count The number of user sessions established on the stressed computer, categorized (0-2,3-5,6-10, etc.)
    Domain Role The domain role of the stressed computer
    Host Name For a virtual machine, the name of the hypervisor host on which the machine was running at the time of the incident
    Hypervisor Type For a virtual machine, the vendor of the hypervisor host
    Columns available in the “Session Stress” category
    Account Name The user account name of the stressed session
    Account Domain The user account domain of the stressed session
    Computer The computer on which the stressed session was hosted
    Folder The ControlUp organization folder in which the computer hosting the session resides
    Counter The ControlUp column responsible for the increase in the session’s Stress Level
    Trigger name The name of the trigger that caused the incident to be recorded (links to the trigger’s settings)
    Client name The name of the client computer from which the stressed session has been established
    Session state The state of the user session at the time of the incident
    Initial program The program configured to start when the session is initialized (or published application)
    Columns available in the “Process Stress” category
    Image name The name of the stressed process
    EXE version The version number of the stressed process
    Product name The product name of the stressed process
    Product version The product version number of the stressed process
    Manufacturer The manufacturer of the stressed process
    User name The name of the user who launched the process
    Description The description of the stressed process
    Computer The computer on which the stressed process was executed
    Folder The ControlUp organization folder in which the computer hosting the stressed process resides
    Command line The command used to launch the process, including the full path and command-line arguments
    Priority The base CPU priority of the stressed process
    Created time The creation timestamp of the stressed process’s executable file
    Modified time The last modification timestamp of the stressed process’s executable file
    Columns available in the “Account Stress” category
    Account name The name of the user account
    Account domain The AD domain name of the user account
    Total sessions The total number of sessions established using the user account
    Total processes The total number of processes executed using the user account
    Stress Level The Stress Level severity recorded during the incident
    Columns available in the “Application Stress” category
    Image name The name of the process executable
    Total processes The number of process instances for the executable
    EXE version The EXE version of the executable file
    Stress Level The Stress Level severity recorded during the incident
    Columns available in the “Windows Event” category
    Event log The name of the Windows Event Log in which the event was logged
    Event type The type of the event – Error, Warning, Information, Audit Success / Failure
    Event ID The event ID number
    User The User field as logged in the event
    Computer The Computer on which the event was logged
    Full message The full text of the event
    Event source The source of the event
    Raw message The raw message text of the event (without substituted parameters)
    Folder The ControlUp organization folder in which the computer that logged the event resides
    Columns available in the “Process Started” category
    Image name The name of the started process
    Image version The executable version of the started process
    Command line The command used to launch the process, including the full path and command-line arguments
    User The user who launched the process
    Computer The computer on which the process was launched
    Folder The ControlUp organization folder containing the computer on which the process was started
    Columns available in the “Process Ended” category
    Image name The name of the ended process
    Image version The executable version of the ended process
    Command line The command used to launch the process, including the full path and command-line arguments
    User The user who launched the process
    Computer The computer on which the process ended
    Folder The ControlUp organization folder containing the computer on which the process ended
    Exit code The exit code recorded when the process ended
    Columns available in the “User Logged On”, “User Logged Off” and “Session State Changed” categories
    User name The user name of the established session
    Machine name The computer hosting the session
    Initial program The program configured to start when the session is initialized (or published application)
    Session ID The session ID number
    Columns available in the “Session State Changed” category (in addition to the above)
    From state The session state before the change
    To state The session state after the change
    Columns available in the “Computer Down” category
    Computer The name of the computer disconnected from monitoring
    Action The reason for disconnection
    Error description The description of the error that led to disconnection
    Folder The ControlUp organization folder containing the computer
    Columns available in the “NetScaler Stress” category
    NetScaler Name The name of the NetScaler on which the incident has occurred
    Version he NetScaler’s version
    Load Balancer Name The name of the Load Balancer on which the incident has occurred
    LB Service Group Name The name of the Service Group on which the incident has occurred
    LB Service Name The name of the Service on which the incident has occurred
    Gateway Name The name of the Gateway on which the incident has occurred
    NIC ID

    The ID of the NIC on which the incident has occurred

    Columns available in the “Load Balancers Stress” category
    NetScaler Name The name of the NetScaler on which the incident has occurred
    Version he NetScaler’s version
    Load Balancer Name The name of the Load Balancer on which the incident has occurred
    LB Service Group Name The name of the Service Group on which the incident has occurred
    LB Service Name The name of the Service on which the incident has occurred
    Gateway Name The name of the Gateway on which the incident has occurred
    NIC ID

    The ID of the NIC on which the incident has occurred

    Columns available in the “LB Services Stress” category
    NetScaler Name The name of the NetScaler on which the incident has occurred
    Version he NetScaler’s version
    Load Balancer Name The name of the Load Balancer on which the incident has occurred
    LB Service Group Name The name of the Service Group on which the incident has occurred
    LB Service Name The name of the Service on which the incident has occurred
    Gateway Name The name of the Gateway on which the incident has occurred
    NIC ID

    The ID of the NIC on which the incident has occurred

    Columns available in the “LB Services Groups Stress” category
    NetScaler Name The name of the NetScaler on which the incident has occurred
    Version he NetScaler’s version
    Load Balancer Name The name of the Load Balancer on which the incident has occurred
    LB Service Group Name The name of the Service Group on which the incident has occurred
    LB Service Name The name of the Service on which the incident has occurred
    Gateway Name The name of the Gateway on which the incident has occurred
    NIC ID

    The ID of the NIC on which the incident has occurred

    Columns available in the “Gateways Stress” category

    NetScaler Name The name of the NetScaler on which the incident has occurred
    Version he NetScaler’s version
    Load Balancer Name The name of the Load Balancer on which the incident has occurred
    LB Service Group Name The name of the Service Group on which the incident has occurred
    LB Service Name The name of the Service on which the incident has occurred
    Gateway Name The name of the Gateway on which the incident has occurred
    NIC ID

    The ID of the NIC on which the incident has occurred

    Columns available in the “NICs Stress” category

    NetScaler Name The name of the NetScaler on which the incident has occurred
    Version he NetScaler’s version
    Load Balancer Name The name of the Load Balancer on which the incident has occurred
    LB Service Group Name The name of the Service Group on which the incident has occurred
    LB Service Name The name of the Service on which the incident has occurred
    Gateway Name The name of the Gateway on which the incident has occurred
    NIC ID

    The ID of the NIC on which the incident has occurred

  • Events Pane

    By default, the Events pane provides a real-time aggregation display of selected events from your connected computers’ Windows System, Application, and Security event logs. You may monitor any number of additional event logs by clicking on the “Add an Event Log” button in the Home ribbon and typing the name of the log you would like to add. The log name you enter must be exactly as it is in the computer you want to monitor in the "Windows Logs" section. Additionally, the log file must be in the standard format.

    Note: ControlUp does not support the "Applications and Services Logs" in newer versions of Windows.

    The following event types can be collected:

    1. Error events
    2. Warning events
    3. Failure Audit events

    Events are preserved in the Events pane for a retention period that can be configured in the Command Bar. (Default event retention period is set to 60 minutes).

    The following actions are available when right-clicking on events:

    Filtering Events

    Using the Events Settings button from the Home ribbon bar (or the Events tab in the Settings window), you can configure parameters according to which the events will be displayed. The following filtering methods are available:

    • Excluded Events: by adding an Event Log Filter Rule here, you are setting a condition which, if matched, will cause the event to be ignored. For example, setting a rule which specifies Event ID 33 will drop all future events with the ID number 33 from the Real-Time Console.
    • Event type. You can choose to ignore errors, warnings, and/or audit failure events.
    • Frequent Events Filter. By default, ControlUp is configured to ignore events that appear repeatedly for a configured amount of times during the event retention period. The default value is 100, so by default, an event that appears a hundred times within an hour will fall under the “Frequent Events Filter” category and will no longer be reported. When an event reaches this threshold, you will see a pop-up notification in the left bottom corner of the ControlUp Real-Time Console. This notification may be hidden by using the “Disable Frequent Event Filter Notifications” checkbox.

    Note: Please note that if you turn off the default Frequent Event Filter, your ControlUp Real-Time Console may accumulate a large number of events, which may dramatically increase the amount of RAM consumed by the console. You may mitigate this condition by clearing events or by decreasing the Event Retention Period.

    Note: The above filtering mechanisms only affect future events. In order to remove unneeded events from the current view, use the Clear or Clear All buttons on the Command Bar.

    Event Actions

    Add to Filter

    The selected event’s details will be used to create a new filter rule to prevent similar events from appearing in the Events pane. You will be presented with a configuration window in which you will be able to customize the rule before applying it.

    Remove from this View

    The selected event(s) will be removed from the current view. This will not prevent similar events from appearing in the Events pane in the future.

    Search In: (Google, EventID, Microsoft TechNet)

    Right-clicking on an event and selecting “Search In” will enable you to conduct online research using selected search engines with the details of this event. Internet connectivity is required for this feature.

    Remote Desktop to Computer

    Use this action to switch to the Remote Desktops pane and establish a Remote Desktop Connection to the computer from which the selected event originated.

    Launch Event Viewer

    Use this action to open the Windows Event Viewer while connecting to the machine on which the event originated.

    Note: This action requires RPC access to the managed computer(s) and administrative privileges on these computer(s). You might not be able to display the events on computers that do not meet these prerequisites.