2
| : |
j If you are testing Compaq Analyze and its analysis rules, you may need to simulate automatic analysis. If you are unsure whether you wish to perform manual analysis or simulation of automatic analysis, then you should follow Section5.5 on manual analysis.
2
| ( | : |
By default, any given problem report will only be generated once by automatic analysis or simulated automatic analysis within a 24 hour period. For example, if you use simulated automatic analysis to process a binary event log file and a problem report is generated, subsequent simulated automatic analysis of the same log file will not produce the problem report. This remains true for a 24 hour period, since DeCOR prevents the same callout report from being generated during that time frame. To force Compaq Analyze to generate the same problem report a second time within a 24 hour period, use the following procedure:
( Z For more information on instance files, see Section5.2. \ca\data\decorEvtAuto.ins
2
| ( | : |
You can simulate the occurrence of events and their automatic analysis by issuing a command-line command to open a log file (or files) while a web interface is running, and observe the results in the web interface. The events are translated and analyzed as if they occurred on the local system at the current time. Events and problem reports from analysis appear in the appropriate display frame of each open web interface, just as automatic events do. No results appear in the window where the command is issued. The command merely notifies the Director to read and process the log file and does not wait for or display the translated events or problem reports.
Unlike automatic and manual analysis, the ca msg command does not consider any time stamp information associated with events. All events are processed as if they occured within a few seconds of each other. As a result, the ca msg command may generate problem reports that would not occur if you were using automatic or manual analysis. In effect, the ca msg command forces the rules to consider events that would otherwise be disregarded because of their age. Hence, you should only use the ca msg command for testing purposes.
Although Compaq Analyze can read, translate, and analyze error logs produced by any of the supported platforms, simulating automatic analysis on a different platform than the one that created the log file can lead to unpredictable results, due to conflicts between true automatic analysis and simulation from another platform.
s Simulating automatic analysis may add entries in the automatic analysis database that impact future analysis results. Therefore, after simulating automatic analysis you should clean the automatic analysis database using the procedures described in Section5.9.2.3. 2
P  | ; Note |
| > | : e& The ca msg command does not support relative path names. Regardless of the operating system you are using, you must enter the absolute path. In addition, when you are specifying a single log file, you must include both the path and the filename. Filenames without a path are not supported. If the path contains spaces, enclose the entire path in quotation marks. For example: ca msg -auto "C:\Program Files\Path\Filename.ext" f f |
t2
| t | n(: | T
n Use the following CLI commands to open a log file, according to your operating system. "8 For Tru64 UNIX I
Enter ca msg -auto /path/filename.ext
w8 For OpenVMSs s
] Enter ca msg -auto [MYUSERNAME.PATH]FILENAME.EXT
.
o8 For Windows s
a Enter ca msg -auto C:\Path\Filename.ext
22
| a | i(: | u
a According to your operating system, use the following commands to open log files for processing. All *.zpd, *.sys, and *.errlog files in the given directory will be analyzed and no outputs are presented in the command prompt window. o2
f
| P | ; T Note 8 | E
| o | : > If you do not specify a path, all the event logs in the examples subdirectory of the WEBES installation directory are analyzed. O | 4
Z8 For Tru64 UNIX >
8 Enter ca msg -autoall /path/
c8 For OpenVMSn
T Enter ca msg -autoall [USERNAME.PATH]
<8 For Windows "
a Enter ca msg -autoall C:\Path\
<
c2
| t | u(: | y
o Simulated automatic analysis may add entries to the automatic analysis database. Therefore, after simulating automatic analysis, be sure to clean the database using the following procedure:
m
( F UNIX – desta stop e
c
ae( E VMS – desta stop = R
L
M( U Windows – net stop desta service 3 S
>
0( p UNIX – rm /usr/opt/compaq/svctools/ca/data/decorEvtAuto.ins o
p
us( i VMS – delete SVCTOOLS_HOME:[CA.DATA]DECOREVTAUTO.*;* n
i
r( } Windows – delete C:\Program Files\Compaq\svctools\ca\data\decorEvtAuto.* . T
N( l UNIX – rm /usr/opt/compaq/svctools/ca/data/scavmark.dat /
,
A( e VMS – delete SVCTOOLS_HOME:[CA.DATA]SCAVMARK.*;* y t
y
M0( y Windows – delete C:\Program Files\Compaq\svctools\ca\data\scavmark.* E r
T
"( G UNIX – desta start T a
r
iN( F VMS – desta start s
e
nN( V Windows – net start desta_service -
"
T2
| s | A(: |
Z The following sections describe modifying the configuration, including the DeCOR Class file and instance file names, and watch flags.
E
=2
| C | f(: | a
f Certain attributes of the EvtAnalyzer component of Compaq Analyze are configurable. To see and change these values, do the following:
"
a Additional information about the System Configuration window is provided in the following sections.
c
2
| d( | : |
Sp If you wish to use a DeCOR Class file other than the standard decor.cls provided in the installation, change the "classFileName" attribute to the complete path and filename of the alternate file. All future analysis, both automatic and manual, will use this file.
r2
| y | "(: | A
The "autoInstanceFileName" and "manualInstanceFileName" attributes define the instance files to which the DeCOR analysis engine writes its data (see Section5.2).
- You can change the file used for this purpose, but realize that the registered knowledge sets depend on the instance file used. If no rule set file names are registered in an instance file, then no analysis occurs for incoming events. You can enter an instance file name that does not yet exist. The first activity you perform that requires using the instance file (such as registering a rule set) causes Compaq Analyze to create the file.
T
>2
| r | >(: | M
s The "watchFlags" attribute of the EvtAnalyzer component, provides the ability to turn on one or more types of debug outputs from the DeCOR analysis engine.
" The attribute value is the summation of all bit values, where the bits have the meanings described here. Setting a bit to a 1 turns the flag on. For example, entering a value of 5 (4 + 1) turns on only the "facts" and "rules" watch flags. A value of -1 turns on all watch flags (because its binary value is 111111...). A value of 0 turns off all watch flags.
8 L
( d bit P
; t( o value :
; "( n flag" /
; r( f bit f
; P( i value c
; P( r flagn 2
( b0O "
; s( 1=9 P
; i( facts T
; ( b92
; a( 512=/ M
; a(
instances
( b1- >
; P( 2=" n
; ( activations
; ( b10
; r( 1024= n
; "( slots 8
( b2S
; /( 4=F "
; r( rules
; e( b11 ,
; <( 2048= C
; A( messagesA ,
( b3A >
; "( 8=e a
; l(
compilationsB D
; ;( b12 F
; >( 4096= /
; >( messageHandlers e
( b4"
; e( 16=
; ( all e
; ,( b13 e
; s( 8192= A
; o( genericFunctionst i
( b5n /
; -( 32= .
; A( focus A
; a( b14
; ( 16384=l a
; N( methods I
( b6Z O
; i( 64= R
; ( statisticsn c
; i( b15 m
; =( 32768=e
; e( dribble
( b7 r
; c( 128=R N
; E( globals
; =( b16 c
; >( 65536=a
; e( krsDebugu m
( b8o b
; ( 256= 5
; (
deffunctions1
; N( Z O
; G( O
; "( > P
E K T
T Z "
,
The debug outputs will appear in the standard output log file as described in Chapter1.
N
>
T