Each log file is a simple listing of logged messages. Operations Sentinel logging creates one file per day for each log: host log, application log, and standard log.
Typical Message Format
Message are typically shown in a format similar to one of the following:
source^msgtype> 12:01:00.147 12:05:00 message-text source^qualifier: msgtype> 12:01:00.147 12:05:00 message-text
Notes:
A consolidated log file has a different message format.
In some rare cases the time in the log may not be updated automatically. This might require a restart of Operations Sentinel services.
source
is one of the following log sources:
Host. The name of the host as shown in a topology and as configured using Operations Sentinel Console, if the host is directly connected to Operations Sentinel without a system console in between.
OS 2200 console. The label of a configured console that is attached to the host as shown in a topology and as configured using Operations Sentinel Console, if the host is an OS 2200 node or an OS 2200 partition of a ClearPath Dorado Enterprise System.
Application. The name of the application, if the message was supplied by an external application.
Component. The name of an Operations Sentinel component, such as spo, spues, spals, splog, spec, sp-ams, spovClient, or Windows_Interface.
^
is a delimiter.
qualifier
further qualifies the log source. Where there are multiple instances or subparts of a log source, this field identifies the instance or subpart. This corresponds to the application qualifier in an event report.
:
is the optional delimiter that indicates that a qualifier or session is present.
msgtype
is the type of the logged message. See Message Types for a list of the message types. Other values can be defined by site applications or by log event reports generated from SP-AMS database specifications.
>
is a delimiter.
12:01:00.147
is the time (to millisecond granularity) the message was logged by Operations Sentinel, the Operations Sentinel server timestamp
12:05:00
is the time (to second granularity) the message was generated by the sender, the host local timestamp. The time reflects the time zone of the sender. The host local time is present only if it or a synchronizing time is received from the sender.
The host local time is generated as follows for various system types and applications:
OS 2200 console. Time is computed based on synchronization with the periodic continuous display message. When a continuous display message is received, the difference between the host local time and Operations Sentinel server time is computed. When a new message arrives, this difference is added to the new Operations Sentinel server time to compute the host local time. The host local time can be absent if no synchronizing time is received via the continuous display.
UNIX console connection. Time is based on synchronization with the periodic message from the heartbeat script running on the UNIX system. When a heartbeat message is received, the difference between the host local time and the Operations Sentinel server time is computed. When a new message arrives, this difference is added to the new Operations Sentinel server time to compute the host local time. The host local time can be absent if no synchronizing time is received from the heartbeat script. See the Operations Sentinel Administration and Configuration Guide for more information on using the heartbeat script.
Microsoft Windows system. System time on the Windows system as reported by the Operations Sentinel Windows agent running there.
Operations Sentinel Event Server API client applications. Time supplied by the client application, or a computed time based on synchronization of a previously received time.
message-text
is the text as it appears on the console if the log corresponds to a configured host and the log source is a console.
Consolidated Log
The message format of a consolidated log file varies. The consolidated log file is always sorted by the Operations Sentinel time. Some log file messages may also include the local host time.
The first field of a consolidated log file contains the log name of where the information came from. The file also contains information regarding the start time, end time, start date, and the log message.