User's Manual

206 Monitoring and maintaining FSE
The trap argument to the SendTrap action can be any of the following:
TIP: To trigger several actions per one rule, the actions must be delimited by commas.
Starting the monitoring and analysis of log files
To monitor and analyze the log files, start Log Analyzer, which is started as a process. There are
prerequisites which need to be fulfilled to be able to start Log Analyzer.
Linux specific
Before starting Log Analyzer, ensure the following:
• The two Log Analyzer daemons are running.
• The environment variable LD_LIBRARY_PATH is appropriately configured.
For details, see the FSE installation guide for Linux.
Windows specific
Before starting Log Analyzer, ensure the following:
• The Log Analyzer service is started.
For details, see the FSE installation guide for Windows.
To start Log Analyzer, the loganalyzer or the loganalyzer_messages command is used. The
following is the command synopsis:
The -h option displays the usage of the command.
The -d option enables the debug mode for Log Analyzer. The option has the same effect as setting the
Debug parameter in the general configuration file. For more information on the Debug parameter, see
section ”The general configuration file” on page 198.
The -s option enables the SMTP debug mode.
SaveCurrentLogMessage() The current filtered log message is saved to the temporary file in the
directory specified in the general configuration file.
DisableActions() All subsequent actions are disabled.
EnableActions() Actions are enabled.
SendTrap(trap) The current filtered log message is sent as an SNMP trap trap.
Trap Category Description
‘I’ info The filtered log messages are sent by e-mail to the addresses defined in the general
configuration file.
‘W’ warning The filtered log messages are sent by e-mail to the address defined in the general
configuration file with the subject sbj.
‘E’ error The current filtered log message is sent by e-mail to the address defined in the general
configuration file with the subject sbj.
‘C’ critical The current filtered log message is saved to the temporary file in the directory specified in
the general configuration file.
Action Name Description
loganalyzer[_messages] [-h | –-help |
-d | --debug |
-s | --smtp_debug |
-v | --version] ConfigFile