Filtering logs by application or process
You can filter a log by one or more applications or one or more processes on the Logging page. This is particularly useful when capturing data at a lower severity level where a SteelHead might not be able to sustain the flow of logging data the service is committing to disk.
Under Per-Process Logging, these configuration options are available:
Add a New Process Logging Filter displays the controls for adding a process level logging filter.
Process selects a process to include in the log from the drop-down list:
• alarmd—Alarm manager, which processes all alarms, including their thresholds and severity.
• collectord—Application visibility NetFlow collector.
• cifs—CIFS optimization.
• cmcfc—SCC automatic registration utility.
• rgp—SCC connector, which handles SCC appliance communication.
• rgpd—SCC client daemon, the connection manager.
• cli—Command-line interface.
• mgmtd—Device control and management, which directs the entire device management system. It handles message passing between various management daemons, managing system configuration, and general application of system configuration on the hardware underneath through the hardware abstraction layer daemon (hald).
• http—HTTP optimization.
• hald—Hardware abstraction layer daemon, which handles access to the hardware.
• notes—Lotus Notes optimization.
• mapi—MAPI optimization.
• nfs—NFS optimization.
• pm—Process manager, which handles launching of internal system daemons and keeps them running.
• qosd—QoS scheduler and DPI engine.
• rscored—REST API core services.
• rstild—REST translation interface layer.
• sched—Process scheduler, which handles one-time scheduled events.
• ssl—SSL optimization.
• statsd—Statistics collector, which handles queries, storage, and trending of system statistics.
• wdt—Watchdog timer, the motherboard watchdog daemon.
• webasd—web application process, which handles the web user interface.
• domain auth—Windows domain authentication.
Minimum Severity specifies the minimum severity level for the log messages. The log contains all messages with this severity level or higher. Select a level from the drop-down list:
Emergency—Emergency, the system is unusable.
Alert—Action must be taken immediately.
Critical—Conditions that affect the functionality of the SteelHead.
Error—Conditions that probably affect the functionality of the SteelHead.
Warning—Conditions that could affect the functionality of the SteelHead, such authentication failures.
Notice—Normal but significant conditions, such as a configuration change.
Info—Informational messages that provide general information about system operations.
Add adds the filter to the list. The process now logs at the selected severity and higher level.