Log Management Server Status

The Log Management Server Status report is a relatively basic view that provides you with a dedicated interface with which to see high-level Elasticsearch server information. This includes the server name and connection status as well as current data retention setting and disk space limits. More specifically, Total Disk Space Usage Limit represents the limit of total disk space usage on disks where Elasticsearch stores its data while Maximum Total Disk Space Usage Limit reflects a setting inside Elasticsearch itself, and is the maximum that users are allowed to set the Total Disk Space Usage Limit through the Log Management Settings dialog. The Maximum Total Disk Space Usage Limit is displayed only if the Disk-based shard allocation option is enabled inside Elasticsearch. When enabled (by default), if the disk space usage percentage reaches that level, then all indexes residing on the affected node become read-only and no new data can be added. Additionally, you can access the Log Management Settings interface directly from the report without the need to leave the Log Management Dashboard by clicking the applicable hyperlink.

Expanding the lower section of the report allows you to view current disk space usage data for each node. This data includes the actual disk space in gigabytes, the percentage of total disk space on the node used by Elasticsearch indexes, by other programs, and the percentage of free disk space available.

Important: Only one node is configured on the Elasticsearch server by default. The procedure for adding nodes to the server occurs entirely independent of WhatsUp Gold.

At the bottom of the report view, you can now see the following operational metrics:

Devices configured to collect Windows Event Logs
Devices configured to collect Syslogs
Total number of log events collected

Note: Record counts may vary at various levels (e.g., cluster, node, index, etc.) in Elasticsearch and some of these records are categorized as metadata. WhatsUp Gold displays the number of records at the Index level to ensure a greater degree of accuracy regarding how many actual log events, as opposed to total records, were collected.

Log data size (GB)
Daily size increase (GB)
Average log events per second (past hour)

Note: This metric provides you with a sense of scale for the severity of any peaks. A change in average over time may indicate the disk space allocated for the data store needs to be increased to accommodate more rapid growth than anticipated.

Maximum log events per second ( past 24 hours)

Note: This metric can be useful for capacity planning because it identifies spikes and/or growth in events per second and can give administrators a better idea of the appropriate amount of bandwidth needed to handle those spikes and growth.

Approximate days to deplete free disk space

Note: This metric is a rough projection of how many days it may take log collection at the current rate (indicated by the daily size increase in GB) to fill the remaining free disk space. Please note, this estimate assumes no other applications other than Elasticsearch are consuming space on this disk.

Export report data

Report data can be exported from WhatsUp Gold, reused, and distributed in multiple formats. Select Expand () from the Dashboard Options () menu. After the report has been expanded, select the Export Data icon to access the following options:

HTML. Generate and download a .htm file presenting your report data as it appears in the WhatsUp Gold user interface.
Excel. Generate and download a .xml spreadsheet containing your report data.
CSV. Generate and download a .csv file containing your report data.
Text. Generate and download a .txt file containing your report data.
Schedule Export. Set a recurring date and time, format, and email destination for report data export.
Important: Current report data file format options are only applicable to export schedules created using WhatsUp Gold version 2021 and later. Any report data export schedule created using an earlier version of WhatsUp Gold will still result in a .PDF output until that schedule is removed from, then recreated in the Scheduled Reports Library using the latest version of WhatsUp Gold.