Configuration of event logging

The data about the events registered in the system is stored in the Protocol table in the Psim database (by default) or in the Protocol table in a separate database (see Extracting event viewer into individual database).

You can configure the database of the event viewer by means of the settings panel of the Computer system object:

1. To disable event logging to the database of the event viewer, set the Disable logging checkbox (1). This setting is relevant only for the server corresponding to the Computer object.
   
2. If you want to log to the database of the event viewer only the events registered on this computer, set the Only local protocols checkbox (2). This setting is relevant only for the server corresponding to the Computer object. If you set this checkbox, then you must start the synchronization of the event viewer database manually, for example, using the Sync.exe utility or a macro (see The Sync.exe console utility and Example of macro to start the Event Viewer databases synchronization).
3. If you want to log all event parameters registered on this computer to the event viewer database, set the Parameters logging checkbox (3). This setting is relevant only for the server corresponding to the Computer object.

4. In the Events archive length field (4), specify the time period in days for storing the event archive in the event viewer database. This setting is relevant only for the server corresponding to the Computer object. To specify the time period for storing the event archive for all servers of the distributed system, use the common settings on the Programming tab (see The settings panel of the Security zone object). The value of the Events archive length parameter on the settings panel of the Computer object has the higher priority. If you don't specify the value in the Events archive length field on the settings panel of the Computer object, the value specified on the settings panel of the Security zone object is used.

   Note

   The specified events archive length is also applied to the events received by the incident server that are stored in the PROTOCOL_INC_SERVER table of the Psim database.

   Note

   The process of clearing the database of the events older than the specified storage period is started by default every three minutes and deletes 100,000 events, starting with the oldest ones.

5. Click the Apply button to save the changes (5).

Configuring event logging to the database is complete.