The data about events registered in the system is stored in the Protocol table in Intellect (by default) or in the Protocol table of an individual database (see Extracting event protocol into an individual database).

The Event Viewer database is configured by means of the settings panel of the Computer system object.

Configure the Event Viewer database as follows:

  1. To disable events recording to the Event Viewer database, set the Disable logging checkbox (1). This setting is relevant only for the Server corresponding to the Computer object.
  2. Set the Only local protocols checkbox in case when only events registered on this computer are to be logged to the database (2). This setting is relevant only for the Server corresponding to the Computer object.
    If this checkbox is set checked, then the event log database synchronization is to be started manually using the SyncProtocol.exe utility or macro (see The SyncProtocol.exe utility to synchronize event log database and Example of macro to start the Event Viewer databases synchronization).

  3. In the Events archive length field specify the time period in days for storing the event archive in the Event Viewer database (3). This setting is relevant only for the Server corresponding to the Computer object. To specify the time period for storing the event archive for all Servers in the distributed system, use the common settings in the Programming tab (see The Settings panel of the Security zone object section). The value of the Events archive length parameter on the settings panel of the Computer object has the higher priority.

    If no value is specified in the Events archive length field on the configuration panel of the Computer object, the value specified in the configuration panel of the Security zone object is used.


    The specified Events archive length is also applied to the events received by the Incident server, which are stored in the PROTOCOL_INC_SERVER table of the Intellect database.


  4. Click the Apply button to save all the changes (4).
Steps 1 and 3 are for configuring events viewing in the system with distributed configuration.

The Event Viewer database is now configured.

The tweaki.exe utility can also be used to configure events viewing (see the The Settings panel of the Intellect section).


Define required disk space (size of event log database)

Configuring the Operator protocol interface object

Configuring the Event Viewer interface object

Event control via Event viewer

Event processing using the Operator protocol

Configuring Incident server and Incident handler

Events control and processing using the Incident manager