Maintenance Manual

Chapter 6 Event Management
Windows Event Logs
6-6
Cisco ICM Enterprise Edition Administrator Guide Release 6.0(0)
Event Log Settings
ICM software requires the Event Log settings shown in Table 6-3.
These values ensure that none of the logs become full. The 1024K setting ensures
that large log files can be accommodated in any of the logs. The Application log
must overwrite events as needed because it logs EMS Errors and Warnings,
application events, and SQL Server events. If it could not overwrite events, the
Application log could quickly become full.
Viewing the Event Logs
The Microsoft Windows Event Viewer allows you to view and manage events on
a system-by-system basis. You can use the Event Viewer to isolate problems on
specific computers. Once you identify an individual computer as generating
errors, you can use the Windows Event Viewer to view the computer’s local event
data. All EMS-generated Error and Warning events are logged to the local
computer’s Windows Application Event Log.
The Windows event logging process starts automatically each time a Windows
system is started. At an Admin Workstation, you can use the Event Viewer to view
event data for that computer or for other locally connected computers. For
example, you might select a PG or a Logger and view the event data for those
computers.
To start the Windows Event Viewer:
In the Administrative Tools group in the Windows Program Manager,
double-click the Event Viewer icon. The Event Viewer window is displayed:
Table 6-3 Event Log Settings
Log Size Wrapping
Application 1024K Overwrite as Needed
System 1024K Overwrite Events Older than 7 days
Security 1024K Overwrite Events Older than 7 days