Opsview Knowledge Center

Event Viewer

Learn how to use Event Viewer in Opsview Monitor

This section provides an overview of the Event Viewer, including how to filter the event table and graph, and how to export events.

Introduction to Event Viewer

This document explains how to use the Event Viewer section of Opsview Monitor, including how to filter the event graph and table, and also how to export the events table to a downloadable format.

Overview

An EVENT is when a Host, Service Check, Business Service or Component changes state, e.g. if a host changes state from 'UP' to 'DOWN. When this happens, an EVENT is generated which logs the date/time and other details. If the Host returns to 'UP' 20 minutes later, another event will be generated to display this.

These events can be viewed within the 'Events Viewer'. The Events Viewer section can be accessed by clicking on the 'Events Viewer' tile within the 'Monitoring' tab of the overlay menu, as shown below:

Once loaded, you will be able to view all of the events that have occurred within the Opsview Monitor system:

By default, the Event Viewer is filtered to display events that have occurred within the past six hours.

The Event Viewer is split into two, linked sections:

  • Event Graph
  • Event Table

The Event Graph will display in a bar graph format all the events that occurred within a certain time period. These bars will group the events together, i.e. for a six-hour time period the bars represent a 10-minute time period, for a one-day time period the bars represent thirty minutes. The bars reflect the number of events that have happened in that time period, NOT the state of the system at that point in time. For example, if nothing happened between 3:00 pm and 4:00 pm, there would be no events - not a big green bar.

Each bar is split into up to four separate parts:

  • Red: CRITICAL Service Checks and DOWN Hosts
  • Yellow: WARNING Service Checks
  • Green: OK Service Checks and UP Hosts
  • Purple: UNKNOWN Service Checks and UNREACHABLE Hosts

To view the count of each section, i.e. 'How many 'Reds' at this point in time..', hovering your mouse over will display a count for each section in the selected bar (as shown above).

The Event Table will display the detail of the bars displayed, with one event per table row.

This data is linked to the Event Graph, meaning if there are four events displayed in the Event Table, then there will only be four events visible in the Event Graph.

The Event Table has pagination controls along the bottom, allowing you to change how many events are displayed per page ('Page Size:'); you can also to step through the different pages using the page controls located in the bottom left of the above screen.

Finally, there is a check box labelled 'Auto refresh:'. If checked, new events will appear at the top of the table (if on 'Page: 1') and these new events will be shaded in a yellow color to highlight that these are newly-added events. The yellow shading will disappear when the next auto refresh occurs.

Using Events Viewer

There are three main uses of the Event Viewer:

  • Filtering
  • Exporting
  • Sharing

Filtering

Filtering allows you to pin-point specific events within the Event Viewer that you wish to analyze and interpret. Within the Event Viewer there are four ways of filtering:

  • Date/Time
  • Text Search (within 'Output' column)
  • Filter Options
  • Event Graph: Bars

Date/Time

To filter on date/time, you can use the 'Period' dropdown within the Event Table:

You can choose 'one day', for example, which will display all events that have occurred between 'now' and one week ago; similarly you can select '1 hour' to view the last hour's worth of data.

There is also the option to specify a 'custom' period:

The modification of the 'Period:' field will re-populate both the Event Graph and Event Table with the relevant data.

Text Search

To undertake a Text search, simply enter your search terms in the 'Search:' box and click 'Enter':

To clear the search filter, simply delete the text from the 'Search:' box and click 'Enter'.

Filter Options

There is a button labelled 'Filter Options' within the header of the Event Table:

When ‘Filter Options’ is clicked, a modal window similar to the below will load which has three or four filter tabs (depending on whether BSM is enabled or not). Multiple options within each of the three/four tabs can be selected, i.e. ‘Host State: DOWN/UNREACHABLE and Filter by Host: Opsview’, for example. The options are broken down as follows:

Hosts

The following filter options are available for Hosts:

  • Filter by Host Groups
  • Filter by Hosts
  • Filter by Status
  • Filter by Handled or Unhandled

Service Checks

The following filter options are available for Service Checks:

  • Filter by Service Checks
  • Filter by Status
  • Filter by Handled or Unhandled

BSM

The following filter options are available for BSM:

  • Filter by Components
  • Filter by Hashtags

Hashtags

The following filter options are available for Hashtags:

  • Filter by Hashtags

After selecting your desired filters, clicking on ‘Apply’ which will repopulate the Problems page with the relevant data. You can also use 'Select All' and 'Clear All' to aid your filter selection.

To clear the applied filters, click on the ‘Reset Filters’ button next to the 'Filter Options' in the header:

Event Graph:Bars

Finally, you can choose to filter the Event Viewer by clicking on one or more bars within the Event Graph:

In the above example, we have clicked on a single bar which has filtered the Event Table portion of the Event Viewer, and reduced the opacity of the other bars to 30%.

In the above example, we have clicked on four separate bars which again have filtered the Event Table portion of the Event Viewer, and reduced the opacity of the other bars to 30%.

To clear the selected bars, simply click on 'Reset View', as shown below:

Exporting

The filtered Event Viewer data can be exported to one of three formats:

  • .csv
  • .json
  • .xml

To export the data, simply click on the 'Export' button and then choose the desired format:

This will take the data within the Event Table with the applied filters and export it to the chosen format, which will be downloaded via your browser:

Sharing a View

The Event Viewer, once filtered, can also be shared with other Users of Opsview Monitor. This allows you to filter the Event Viewer using the aforementioned filters (Time, Filter Options, Search, etc) and then send your team members a link which, when clicked, will take them to the same page.

To share your specific, customised view, simply click on the 'Share' arrow, located within the navigation bar, as shown below:

When clicked, this button will display a modal window which contains a hyperlink:

This hyperlink can be shared with other Users of Opsview Monitor, who when navigating to this link, will see the exact same view including filters, time period and more.

Audible Alerts

Event Viewer also has the ability to generate a notification sound whenever a new event appears within the Event Table.

To enable sounds, simply click on the 'Speaker icon' as shown below:

This will make a sound through the speakers (if enabled/un-muted) each time a new event appears within the Event Viewer.

To disable sounds, simply click on the 'Speaker icon' again, as shown below:

Event Viewer

Learn how to use Event Viewer in Opsview Monitor