WhatsUp Event Analyst®
Automated Event Log Filtering, Correlation and Reporting
Q: Can Event Analyst read and filter event log entries from Event Archiver and Event Alarm compatible database tables?
A: Yes, and it can export other event log sources directly into database tables for on-demand analysis.
Q: What sort of filtering capabilities does Event Analyst have?
A: Event Analyst ships with hundreds of predefined event log filters (e.g. in most major auditing categories), and you can also define and add your own to its internal database, sorting by OS type, log type, and category. Furthermore, you can create Advanced Filters to filter against Event Archiver or Event Alarm database tables using multiple field conditions without any knowledge of Microsoft SQL or Microsoft Access.
Q: What sort of reporting capabilities does Event Analyst have?
A: Event Analyst can produce detailed HTML reports of both filtered and non-filtered log sources. In addition, it contains prepackaged summary report modules already designed to extract certain types of information from log files into HTML and CSV reports. Finally, you can schedule these summary report modules to be created on a recurring schedule with the Event Analyst Service.
Q: What event log sources can Event Analyst read from?
A: Active computer EVT files, saved EVT files, Microsoft comma-delimited text event log files, Event Archiver comma-delimited text event log files, and Event Archiver/Event Alarm database tables in Microsoft Access, Microsoft SQL, and Oracle.
Q: What exporting features does Event Analyst have?
A: Event Analyst can export data into comma-delimited text files, Access/ODBC database tables, and/or HTML files.
Q: I have event logs from 20 servers and 100 workstations that I want to analyze. Event Analyst however runs on only my machine. How many licenses do I need?
A: Event Analyst is licensed per server and/or workstation from which logs are being analyzed. Therefore, you would need 20 server licenses and 100 workstation licenses.
Q: Can I work with multiple event log sources at the same time?
A: Yes, Event Analyst is a MDI (Multiple Document Interface) application, and uses a separate, multi-threaded window for each different log source being operated upon.