Searching, Sorting, and Reducing
WhatsUp Gold logging views provide a running journal you can filter and distribute as part of daily operations, tracking, or periodic audits.
. Full text search on log views. 
Wildcard character support.
Provide a keyword and use wildcards to view only rows that contain the keyword for the selected column or view.
Most column and log view filters provide the following wildcard matching:
- Match either zero characters or any one character ('?').
Example: 198.51.100.2? (Matches tokens with IP address ending with 2, or 20-29.) - Match either zero, any one, or many characters ('*').
Example: Stop* (Matches log strings containing Stop, Stopped, Stopping, and so on.)
. Columns are sortable.
. Filter for specific substrings.
. Select an effective interval.
Example: Use Report Views and Filtered Logs for Incident Management
As part of incident management and response, pair filtered logs or reports with their thresholding counterpart. For example, let's say you have a VMware threshold alert for High Availability error events. Until the critical period passes, you can keep a VMware Event Log open in your network operations center (with filters set to screen for a particular event).
- . Select this option to include HA error events which include the following:
- . Records that the vCenter cannot contact any primary host in the High Availability (HA) cluster.
- . Records when a host failure has been detected by VMware High Availability (HA).
- . Records that the cluster resources are insufficient to satisfy the configured HA failover level
- . Records when there is a HA error on a host.
- . Records when the VMware High Availability (HA) does not find sufficient resources to failover a virtual machine.
- . Records that an error occurred when updating the HA agents with the current state of the virtual machine.
- . Records when a virtual machine failover was unsuccessful.
About Logs