Connecting to an Event Source

There are several methods to configure an event source. Event sources can be deployed by right-clicking on an existing Collector Manager, Collector, or Connectors.

To deploy an event source, you need the following components:

To connect to the event sources:

  1. Click Tools on the menu bar and select Connect to Event Source. Alternatively, click the Connect to Event Source button on the toolbar. The Connect to Event Source window displays.

    Event source types for which you currently have compatible Collector parsing scripts are listed here.

  2. Select an event source from the list to which you want to connect to and collect data from. You can click Add More to import an event source.

  3. Click Next. Select Collector Script window displays.

    You can open the Select Collector Script window by double-clicking or dragging a selected event source from the Event Source Palette window.

  4. Select a Collector script from the list.

    You can also install additional Collector scripts (click Install More Scripts) that support your event source, if it is not listed here. For more information on installing a Collector script, see Adding Connectors/Collector Plug-Ins.

  5. Click Next. The Select Connection Method window displays.

  6. Select a connection method from the list.

    You can also install additional Connectors by clicking on the Install More Connectors button. For more information, see Adding Connectors/Collector Plug-Ins to install Connectors.

  7. Click Next.The Event Source Management window displays.

    You can create a new Collector and Connector or you can use an existing Collector or Connector.

  8. Select an option and click Next.

    Based on the existing Collectors and Connectors in your system that is compatible with your new event source, one or more of these options might be unavailable.

  9. Complete the configuration and click Next.

    The Records Per Second window displays.

  10. Set the number of records to be transferred per second and click Next.

    The General window displays.

    Options

    Description

    Name

    Specify the name of the event source.

    Run

    Select the Run check box if you want to run your event source automatically.

    Plugin Details

    Click the Details button to see plug-in details.

    Alert if no data is received in specified time period

    Set alerts (with repeated option) indicating what to do if no data is received in a specified time interval.

    Limit Data Rate

    Limit the data rate as the maximum number of records per second.

    Trust Event Source Time

    Select Trust Event Source Time to display the Device Time (time when the event occurred) instead of the Event Source Time (time when the event was reported to the console).

    Set Filter

    Set the filter by using the Set Filter button. In the Filter window, add/edit the filters and click OK.

  11. Click Next. The Summary window displays.

    1. Click Test Connection to test the event source.

      The Test Event Source window displays with Data and Error tabs. The Error tab displays the error message if there is any error in the configuration of event source.

      After a few seconds, a sampling of raw data should be received from the event source and displayed in the tab.

    2. Click the Start and Stop buttons to start or stop the test.

      Use the Maximum Rows component to control the maximum number of raw data records to obtain at once.

  12. Click Finish.

NOTE:The Collector parsing script is executed on the same system as the Collector Manager that you select here.

Creating a new Collector and Connector

  1. In the Select Collector Manager window, select the Collector Manager you want to use and click Next.The Configure Collector Property window displays.

  2. Configure the parameters available and click Next. The Configure Collector window displays.

  3. Provide the name of the Collector and configure the options as desired:

    Options

    Descriptions

    Name

    Specify the name of the event source.

    Run

    Select the Run check box if you want to run your Collector automatically.

    Details

    Click the Details button to see plug-in details.

    Alert if no data is received in specified time period

    Set alerts (with repeated option) indicating what to do if no data is received in a specific period.

    Limit Data Rate

    Limit the data rate as maximum number of records per second.

    Set Filter

    Set a filter by using the Set Filter button.

    Trust Event Source Time

    Select Trust Event Source Time to display the Device Time (time when the event occurred) instead of the Event Source Time (time when the event was reported to the console).

    If the Trust Event Source Time option is selected, then all data flowing through the Collector has its Event Source Time trusted even if the event sources do not have this option selected.

  4. Click Next. The Configure Connector window displays.

  5. Provide the name of the Connector and configure the options as desired:

    Options

    Descriptions

    Name

    Specify the name of the event source.

    Run

    Select the Run check box if you want to run your Collector automatically.

    Details

    Click the Details button to see plug-in details.

    Alert if no data is received in specified time period

    Set alerts (with repeated option) indicating what to do if no data is received in a specific period.

    Limit Data Rate

    Limit the data rate as maximum number of records per second.

    Set Filter

    Set a filter by using the Set Filter button.

    Trust Event Source Time

    Select Trust Event Source Time to display the Device Time (time when the event occurred) instead of the Event Source Time (time when the event was reported to the console).

  6. Click Next. The Event Source Configuration window displays.

  7. Continue with Step 9.

Using an existing Collector:

  1. Select this option to use an existing Collector and to create a new Connector to manage the event source connection.

    After you select this option and click Next, the Select Collector window displays.

  2. Select the Collector you want to use and click Next. The Configure Connector window displays.

  3. Provide the name of the Connector and configure the options as desired:

    Options

    Descriptions

    Run

    Select the Run check box if you want to run your Collector automatically.

    Details

    Click the Details button to see plug-in details.

    Alert if no data is received in specified time period

    Set alerts (with repeated option) indicating what to do if no data is received in a specific period.

    Limit Data Rate

    Limit the data rate as maximum number of records per second.

    Set Filter

    Set a filter by using the Set Filter button.

    Trust Event Source Time

    Select Trust Event Source Time to display the Device Time (time when the event occurred) instead of the Event Source Time (time when the event was reported to the console).

  4. Click Next.The Event Source Configuration window displays.

  5. Continue with Step 9.

Using an Existing Connector

  1. Select this option to use an existing Collector and an existing Connector to manage the event source connection.

    After you select this option and click Next, the Select Connector window displays.

  2. Select the Connector you want to use and click Next.

  3. Continue with Step 9.

For trademark and copyright information, see Legal Notices.