The NMIS Event Log is a realtime update of what NMIS see's is happening with devices being managed. By default the NMIS event log has this name, /usr/local/nmis8/logs/event.log
Event Log Output
The raw event log looks like this, a log entry exists when a Notification Policy has resulted in sending an email.
Event Log Contents
The fields which are included in each event are described here.
|Event Log Data||Description|
|time||The UNIX time of the event|
|node||The node name which NMIS knows the node by|
|event||The name of the event, possible values at present are listed in this article NMIS Event List.|
The event level, possible values are:
|element||The specific element of the node experiencing this problem. This will be an interface, service name, disk or processor ID, etc.|
|details||Other details about the event, like threshold values, time event was active|
Poller Event Log
When viewing the Poller_Event_Log, you are viewing syslog events from NMIS poller servers sending events in by syslog. The end of the line incluse the sending server with a ":: servername" appended to the end.
The raw poller log file will look like this:
The first part of the lins is added by syslog "Feb 12 07:00:29 localhost nmis.pl:"
The rest of the line "NMIS_Event::nmisdev64.dev.opmantek.com::1360618812,nmisdev,Service Up,Normal,port80, Time=00:05:05" is a normal NMIS Event log entry, with "NMIS_Event::servername::" appended to the front of the log entry.