Heartbeat objects define which Event IDs the logging server is looking for and the interval at which those events must occur. You can also define the information that is returned in the heartbeat event’s
, , , , , and fields.If an event does not occur within the designated interval, the logging server generates a heartbeat event (EventID 0001001). The information in the Heartbeat object’s Text1, Text2, Text3, Value1, Value2, and
fields is used to populate the corresponding fields in the heartbeat event. The Notification Filter can differentiate heartbeat events based on the values you define in the , , , , , and fields.The heartbeat event is automatically logged to the central data store; however, if you want to receive notification that a specific event has not occurred, you must create a Notification Filter for the corresponding heartbeat event.
The following table provides a description of each Heartbeat object attribute.
IMPORTANT:You must restart the logging server to effect any changes in Heartbeat object configuration. For more information, see Section H.3, Secure Logging Server Startup Commands.
Table 7-2 Heartbeat Object Attributes
Attribute |
Description |
---|---|
|
This field allows you to provide a description and any necessary explanation for the Heartbeat object. The field limit is 255 characters. |
|
The Event ID you want the logging server to monitor. The Event ID uniquely identifies each type of logged event. For more information, see Section A.1, Event Structure. If a logging application does not log the Event ID within the designated interval, the logging server generates a heartbeat event. IMPORTANT:The Event ID is not included in the heartbeat event. Therefore, you should provide information in the , , , , , and fields that allows you to determine which event triggered the heartbeat event. |
|
The maximum number of seconds between each event occurrence. If the event does not occur within the designated interval, the logging server generates a heartbeat event. |
|
This field allows you to specify the originator you want the logging server to monitor. In an event, the originator field captures who or what caused the event to happen. For more information, see Section A.1, Event Structure. |
|
The information that appears in the heartbeat event’s field. It can contain any text string up to 255 characters.To facilitate filtering of heartbeat events, the , , , and fields should include information that allows you to identify which event triggered the heartbeat event. |
|
The information that appears in the heartbeat event’s field. It can contain any text string up to 255 characters. |
|
The information that appears in the heartbeat event’s field. It can contain any text string up to 255 characters. |
|
The information that appears in the heartbeat event’s field. It can contain any numeric value up to 32 bits. |
|
The information that appears in the heartbeat event’s field. It can contain any numeric value up to 32 bits. |
|
The information that appears in the heartbeat event’s field. It can contain any numeric value up to 32 bits. |
Operators |
Click the plus sign (+) to add a new line. Click the minus sign (-) to remove a line. Each line defines a separate event for the logging server to monitor. If a given event does not occur, the logging server generates a unique heartbeat event using the information from the , , , , , and fields.There is no programmed limit to the number of events that can be added to Heartbeat objects. |
Status |
Allows you to enable or disable a Heartbeat object. By default, all Heartbeat objects are enabled. This means that the logging server loads the object’s configuration in memory at startup. IMPORTANT:The Heartbeat object must be located in a supported Notification container for the logging server to use it. For more information on the logging server’s Notification Container property, see Logging Server Object Attributes . If you select the option, you must restart the Secure Logging Server for the setting to become effective. Thereafter, the logging server cannot load the object’s configuration until you select .For information on unloading the logging server, see Section H.3, Secure Logging Server Startup Commands. |