Tail of Windows Event Log
Tail of Windows Event Log report reveals the n most recent Windows OS system log ("Event Log") messages (also referred to as the "tail") for devices you select. This report enables quick access to last known events to occur on selected Windows OS host devices.
- . Date and time group of event.
- . Windows Event message category.
- . Full message data.
Generate a report
. 
Choose one or more host devices you want to see Tail of Windows Event Log measurements for.
Use the Select Device dialog for one of the following:
Control
|
Purpose
|
Device 
|
Browse and choose a single device.
|
Single Interface 
|
Choose an interface on a device.
|
Device Group 
|
Choose an existing group of one or more devices. You can also create custom or dynamic groups.
|
: You can organize devices into custom or dynamic groups. For more information, see Grouping Devices.
. 
Choose times for the Tail of Windows Event Log. (For recently observed measurements, select from the Date Range 
drop down list.)
Choose time constraints for data view
Control
|
Purpose
|
Date Range
|
Choose or define an overall date range.
|
Business hours
|
- Focus on specific days of the week and periods within each day.
- Reveal trends that are sensitive to business hours, time zones, and other periodic attributes in the observed data.
|
. 
Sort and remove columns, group rows based on specific column values, and remove noise and chaff from the table.
Filter and pick by column
Click a report heading 
and use the following from the drop down list:
Control
|
Purpose
|
Sort. 
|
Sort column in ascending or descending order.
|
Columns. 
|
Pick the columns you want to view. Click a check box to display the column. Clear the check box to hide it.
|
Group by this field.
|
Group table into collapsible rows wherever the current column contains identical data ("field") values.
|
Filters.
|
Provide a keyword to view only rows that contain the keyword for this column.
|
.
Fine tune report presentation and range of values displayed using the Report Settings dialog (optional).
Specify threshold and top n:
Control
|
Purpose
|
Show Top n Items
|
Limit items to the samples with the highest utilization.
|
Threshold Type
|
Switch between minimum or maximum mode for cutoff values for the ranked list.
- . Show peak usage period. (Utilization percentage equal to or greater than Threshold.)
- . Show usage periods where resources are unused or possibly down. (Utilization percentage equal to or less than Threshold.)
|
Threshold(percent)
|
Baseline value used to trim devices at peak or subpeak capacity from the Top n list.
|
Chart and visualize data over time (time series graph)
Control
|
Purpose
|
Display Options
|
Present data as a chart, a table grid, or both.
|
Chart Type
|
- Line/Area. Scatter graph that connects adjacent measurements with straight lines.
- Spline/Area Spline. Choose a graph with a smoothed appearance where adjacent samples exhibit a gradual slope.
|
Chart Options(percent)
|
- Legend, Grid Lines, Range Selector. Include legend, grid lines, and range selector for readability.
- Trend Lines. Present data with a smoothed average to show trend.
|
: Trend lines represent a moving average that can compared to peak and sub peak intervals to demonstrate periods of burstiness, latency, and interruption.
: This report only returns Tail of Windows Event Log metrics for devices that already have the appropriate WMI or SNMP credentials. For more information, see Using Credentials.
Print, share, and export
Generated Tail of Windows Event Log report data can be visualized, shared, and reused:
Choose device. 
Print grid and chart views.
Share Tail of Windows Event Log reports with other users in a single or combined view.
Export Tail of Windows Event Log data and leverage outside of WhatsUp Gold.