Using the Log Analyzer

The Log Analyzer is available to help view, analyze and correlate log files. With the Log Analyzer, you can evaluate multiple event and error logs with time synchronization. This tool makes it easier and faster to debug and resolve problems within multi-tier systems by consuming data in the Common Base Event format and providing specialized visualization and analysis of the data.

With the Log Analyzer, you can gather system and performance data from local and remote systems and the various IBM® Tivoli® Management Services components and create resource sets, groups of definitions that contain the path locations of the logs that you need to examine and the levels of information that they contain. You can keep these customized definitions and reuse them. The definitions provide the same set of instructions about where to find a log, and what kind of information to gather from the log, saving time during subsequent log imports.

The Log Analyzer for your monitoring agent includes a symptom catalog, a knowledge database that enables the Log Analyzer tool to recognize known problems. IBM provides symptom catalogs of known problems many products, including some OMEGAMON® XE Monitoring Agent on z/OS®. It also provides a way for you to capture and define your own symptom information.

In addition to the Log Analyzer, specialized OMEGAMON adapters have been provided to aid in problem determination for some of the more common problems that you might experience when using Tivoli Management Services (Tivoli Enterprise Portal, Tivoli Enterprise Portal Server, and Tivoli Enterprise Monitoring Server). The OMEGAMON adapters uses the Generic Log Adapter (GLA) to process application log files and transform their contents into a common format for logging, management, and problem determination and to facilitate communication between tools in a consistent way.

The OMEGAMON adapters process application log files and transform their contents into a common format for logging, management, and problem determination. You can use the tool to view and correlate logs from the Tivoli Enterprise Portal Server or Tivoli Enterprise Monitoring Server on a distributed system, or the RKLVLOG from a monitoring agent or monitoring server on z/OS system.

The Log Analyzer tool is launched from the Tivoli Enterprise Portal Event Tools view, which is displayed as part of the Event Details workspace or by way of a link off the situation event console view in the Enterprise Status workspace.

The Log Analyzer tool can be used to view logs from Tivoli Enterprise Portal Server, Tivoli Enterprise Monitoring Server, or the RKLVLOG from an OMEGAMON monitoring agent on z/OS.

Additional information related to the Log Analyzer and the Generic Log Adapter is available at http://www.ibm.com/developerworks/. OMEGAMON adapters and associated documentation are available for download from http://www-01.ibm.com/software/tivoli/products/OMEGAMONxeproductline/ as they are developed.