Save Event Log
The Save Event Log activity is used to save entries from an event log so that they can be used later. The Save Event Log activity saves the event log entries to a delimited text file in a format that you specify. The activity allows you to choose which fields will be saved and allows you to filter against the fields to only allow particular event log entries to be saved. This activity uses a satellite license.
The Save Event Log activity can be used to create audit trails of problems that occur with a particular application or specific categories of event log entries. These saved files can later be used to track the performance of servers and applications in your network.
Configure the Save Event Log Activity
Before you configure the Save Event Log activity, you need to determine the following:
The event log that you are saving from
The computer where it is located
The fields that you want to include
The format of the file
Note
If you require only specific entries to be saved and not the entire event log, you will need to know what fields to filter against and what values to filter.
Use the following information to configure the Save Event Log activity.
Details Tab
| Settings | Configuration Instructions |
|---|---|
| Computer | Type the computer where the event log is located. Type localhost to specify the runbook server where the runbook is being processed. You can also use the ellipsis ( ... ) button to browse for the computer. |
| Event log | Type the name of the Windows Event Log where the entries that you are saving are located. You can also use the ellipsis ( ... ) button to browse for the event log name. Browsing is only available if you have specified a valid Computer. |
| Include | Select all the event Log fields that you want to save to the file. You have the option to select Event ID, Source, Category, Description, Type, Computer, and Date/time. |
Filters Tab
| Settings | Configuration Instructions |
|---|---|
| Event ID | Select and type the specific event ID of the event log entry that you want to save. |
| Source | Select and type the value that the Source field of the event log entries will need to match. |
| Category | Select and type the value that the Category field of the event log entries will need to match. |
| Description | Select and type the value that the Description field of the event log entries will need to match. |
| Type | Select and specify the value that the Type field of the event log entries will need to match. |
| Computer | Select and specify the value that the Computer field of the event log entries will need to match. |
| Date from | Select and specify the ranges of dates that the events will need to be from to be included. |
Output Tab
| Settings | Configuration Instructions |
|---|---|
| File name | Type the name of the file where the event log entries will be saved. This file will be saved on the computer where the event log resides. |
| If the file exists | Select the action that you want to take if a file with the same name already exists: - Create a file with a unique name: Select to append a value to the filename to create a unique name that doesn't conflict with an existing name. - Append: Select to append the entries that are being saved to the file. - Overwrite: Select to overwrite the existing file with the file that is being created. - Fail: Select to cause the Save Event Log activity to fail if the filename already exists. |
| File format | Select the format that will be used to save the event log entries to the file: - CSV Delimited: Select to use the CSV format to write each log entry. - TAB Delimited: Select to separate fields in each entry using the TAB character. - Custom Delimited: Select to separate fields in each entry using a custom character that you specify in the Delimiter box. |
| Delimiter | Type the delimiter that you want to use to separate the fields of each entry. |
| Create column headings | Select to save the column header information when saving a set of entries to a file. The header information contains metadata such as the field names. |
Published Data
The following table lists the published data items.
| Item | Description |
|---|---|
| Event log name | The name of the event log that was saved. |
| Computer | The computer where the event log that was saved resides. |
| Name and path of the file where entries are saved | The full path of the file where the event log was saved. |
| Number of Entries | The number of entries that were saved. |