4.5  Processing Log Files

You can process a log file, check its status, and view the results using any of the following methods:

Viewing Process Status

When analysis is successfully started, the log file's icon is animated. Once the file is processed, the icon in the toolbar changes to reflect the status of the log file (see Section 4.5.2) and the results of processing are shown in the display frame.

Viewing Results

Both automatic and manual analysis results are shown in the display frame. The information is organized under the following tabs:

Note


If you have configured the User Settings so SEA only performs manual translation, rather than translation and analysis, the Problem Reports tab is empty. See Section 4.8.1 for more information on User Settings.


Analysis Failed

If the file cannot be processed for any reason, a message similar to the one in Figure 4–18 is shown.

Figure 4–18 Analysis Failed Message
figures/error_message.gif

4.5.1  Additional Toolbar Functions

SEA provides additional functionality depending on the type of processing you are performing.

Figure 4–19 Additional Toolbar Functions
Button
Name
When Does It Appear in the Toolbar?
Description
figures/clear_button.gif
Clear Results Button
When you are performing Automatic Analysis.
The Clear button removes all the entries (problem reports and events) from the display tabs.
figures/reprocess.gif
Reprocess File Button
When you are performing Manual Analysis.
The Reprocess button forces SEA to discard the previous analysis results and reprocess binary log files.
figures/analyze_icon.gif
Analyze File Button
When the User Settings are configured to perform manual translation.
Clicking the Analyze button will perform analysis for the current log file. Thus, if you need to perform analysis, it is not necessary to change the User Settings and reprocess the file.
figures/analyzefilter.gif
Analyze Filtered Events Button
When you use a filter for processing a log file,
Clicking the Analyze Filtered event button allows you to repeat the analysis using only the events that met the filter criteria.

4.5.2   Processing Status

With large log files, translation and analysis operations are not instantaneous. After you have started processing a log file there are several ways to check the operations progress. You can check the processing status from either the navigation tree or the Progress window.

4.5.2.1  Navigation Tree

You can quickly determine the status of automatic or manual analysis by looking at the icons in the navigation tree. Figure 4–20 shows the icons used to indicate analysis results.

Figure 4–20 Status Icons
figures/nav_notify.gif

When automatic analysis generates a problem report, exclamation points are added to the icons for the node, system log, and real time monitoring. The icon remains changed until problem report details are viewed and the tree is refreshed. If another problem report is generated after the tree is refreshed, exclamation points are added to the icons again.

You can also determine the results of manual analysis on a binary event log file by checking the icons. SEA uses a animated yellow icon when a binary log file is being read and an animated green icon during analysis. If processing has completed and problem reports were generated, an exclamation point is added to the icon. Otherwise a check mark is added to the icon. Unlike the icon changes associated with automatic analysis, the manual analysis icon changes remain visible until you close the web interface session.

Note


If you are only performing translation, when processing completes the icon will appear with a dash. See Section 4.8.1 for more information on configuring the web interface to only perform translation.


4.5.2.2  Progress Window

You can open the Progress window by clicking on the Progress Window button in the toolbar (see Figure 4–3).

The Progress window opens in a new browser window (Figure 4–21).

Figure 4–21 Progress Window
figures/progress.gif

The Progress window provides statistics for all the log files that are currently being analyzed by SEA, including one automatic analysis job and multiple manual analysis jobs. The information in the Progress window includes:

The position of each file in the queue is displayed, and information is dynamically updated as the processing changes. When a file finishes processing, it is removed from the window.

When monitoring the progress of a file, you can refresh the display manually by clicking the refresh icon in the upper left hand corner. To stop processing an active file, click on the Stop icon.

4.5.3  Working With Results

After processing, the results of analysis are shown on the tabs in the display frame (Figure 4–22).

Figure 4–22 Additional Entries Navigation

Click for Larger Image

When there are many entries, you can use the navigation options to page through the results.

Note


You can control the number of entries shown in a tab with the options in the User Settings window. Refer to Section 4.8.1 for more details.


4.5.3.1  Problem Reports

The Problem Reports tab displays a list of the reports that were generated by analysis. An example of the problem report list is shown in Figure 4–23.

Figure 4–23 Problem Report Tab

Click for Larger Image

The filters used when generating the problem reports are listed at the top of the screen. However, the display only shows the filters that apply to problem reports and may not list all the filters you selected.

When working with problem reports, these options are available:

The problem reports generated by the web interface are the same as those generated by the CLI.

4.5.3.2  Summary

The Summary tab is only available when you perform manual analysis. If you select Real Time Monitoring from the Navigation Tree, for example, the Summary tab is not displayed.

When performing manual analysis, the Summary tab describes the event types contained in the binary event log file (Figure 4–24).

Figure 4–24 Summary Tab

Click for Larger Image

Each event type is listed along with the number of occurrences. The time stamps for the first and last events are listed under the summary information.

The filters that were applied are listed at the top of the screen. Be aware that the screen only shows the filters that apply to the summary report and may not list all the filters you selected.

Refer to Section 5.8 for details on the summary information presented.

4.5.3.3  Events

The Events tab shows a list of the events contained in the binary event log file. Depending on the filtering options that were applied during processing, all the events in the log file may or may not be shown (Figure 4–25).

Note


You can control the fields that are shown on the events tab from the User Settings window. Refer to Section 4.8.1 for more details.


Figure 4–25 Events Tab

Click for Larger Image

The filters that affected the output are listed at the top of the screen. Be aware that the screen only shows the filters that apply to events and may not list all the filters you applied.

When working with events, these options are available:

The translated events shown by the web interface are the same as those shown by the CLI.

4.5.3.4  Sorting Results

You can sort the results of analysis using either the column headings on the tabs in the display frame, or by using a filter.

Sorting with Column Headings

Sorting with a Filter

4.5.3.5  Displaying Details

The Problem Reports tab lists the reports generated by analysis and the Events tab lists the events in the binary log. You can view the details of a problem report or the translated text of an event by clicking on an entry in the list. Depending on the User Settings selected (see Section 4.8.1), the details will either be shown in the display window or in a new browser window.

In order to make viewing details easier, navigation buttons are available at the top of each detailed entry. The navigation buttons for the Problem Reports tab and Events Tab are shown in Figures 4–26 and 4–27.

Figure 4–26 Navigation Buttons – Problem Reports
figures/detail_pr_nav.gif
Figure 4–27 Navigation Buttons – Events
figures/detail_evt_nav.gif

The buttons are used to move between entries in the list.

When paging between entries, the column heading sort order always reverts back to the Index column in ascending order. Filter sorts, however, still apply.
If you select "Put Event Details In A New Window" in your User Settings, the Index button is not available. Clicking the Previous and Next buttons displays all entries in the new window. See Section 4.8.1 for more information on user settings.