The methods for receiving or monitoring events from other system management tools are outlined below.
Enterprise Manager can be conigured to read and process any format of text log file. The Enterprise Manager scanner (filescanner) is configured to read the text file format.
When Enterprise Manager is activated it will:
Although log files can be monitored over a network it is recommended that Enterprise Manager is installed on the system producing the logfile to minimise/remove any network related issues (e.g. network outages causing loss of connection).
Enterprise Manager can monitor any Windows event log using the supplied ntevtlogscanner. Event logs can be monitored on local or remote machines and once the log is opened, Enterprise Manager will continue to monitor for new entries and pass them to the correlation engine in real time.
The ntevtlogscanner handles NT Event log truncation.
Enterprise Manager can monitor the majority of Unix systems Syslog files using a supplied scanner. The scanner will
The Syslog scanner can only operate on the system on which the Syslog file resides. However, Unix Syslogs can be directed from system to system therefore it is possible to monitor a Syslog remotely.
Enterprise Manager has the ability to receive and decode SNMP traps from SNMP enabled devices. The scanner takes the role of a management station receiving and decoding traps from network devices, applications, printers, etc. The SNMP MIBs are used to decode the traps received.
Enterprise Manager has two methods of handling events sent by email.
Both methods allow events to be received and processed in real time but this is based on the arrival time of the email, not the time it was sent. Some Email services and the associated gateways can inject delays and failures so the use of email for critical alerts is not recommended.
Enterprise Manager can monitor a database table for new entries on any ODBC compliant RDBMS. The scanner periodically polls the table and any new entries are processed and forwarded to the event correlation engine.
Enterprise Manager's widenet scanner is normally used to send messages between Enterprise Manager instances and other Enterprise Manager based products (e.g. RMS Enterprise Monitor). However, the scanner can also receive events from third party products. Widenet uses an
Where a device or application does not allow one of the above methods, Enterprise Manager scanners can use an Application Programmers Interface (API) to capture events directly.
API Scanners are available to monitor:
RMS Services will undertake to write specific API scanners as required.
