Log into Sentinel Control Center. On the menu bar, click
.Right-click the Collector and stop the Collector if it is running.
Right-click the Collector and select
.The Debug Mode Selection window displays.
You can choose to debug in Standalone or Live mode.
Standalone debug mode allows you to debug a Collector even if the associated Collector Manager is not running.
For standalone mode, input to the script comes from an input file rather than a live event source. Specify the path to a raw data file that will be used as input. For Collectors that use a DB Connector, the input file should be a text file with log data in NVP format. For Collectors that use a File Connector, the input should be a text file with log data in CSV format.
For standalone mode, output from the script is to an output file rather than live events. You must specify the path to the output file that the script uses for output. If you specify an output file that does not exist, the system creates the file for you
Select Standalone mode, then stop the Collector.
The Collector Manager does not need to be up and running, and the events do not display in the Active Views.
Specify the path for the input and output files.
If you specify an output file that does not exist, the system creates the file for you.
Click
. The Debug Collector window displays.In the Debug Collector window, click .
In the Source text area, the source code of the Collector appears and stops at the first line of the text script.
Click the bar on the left and toggle a breakpoint in the script code, then click to go to the next breakpoint.
Click to pause debugging whenever required.
After debugging is complete, click to stop debugging.
Click the
/ tab in the debugger window.Click
and specify a location to download the script file.Open the file with any JavaScript editor or a text editor.
Make your edits in the code and save the file, then click
.Debug the uploaded script to have a Collector script ready to use.
Live debug mode requires that the Collector Manager associated with the Collector is running.
In Live debug mode, Input to the script comes from actual event sources connected to the Collector. To get data from a specific event source, you must right-click and start the desired event source via the ESM display. Starting/stopping event sources can be done any time during the debug session.
NOTE:If no event source is started during the debug session, then no data is available in the buffer for the Collector and you see the Collector script’s readData method blocking.
In Live debug mode, Output from the script is via live Sentinel events. The events can be viewed on the Active Views displays.
NOTE:When in Live debug mode, the script engine is executed on the local box rather than the actual box that the associated Collector Manager is running on. The Connectors/event sources still run on the same box as the Collector Manager. When running debug mode, data is automatically routed from the event sources to the script engine running in debug mode on the local box.
For trademark and copyright information, see Legal Notices.