Monitoring Universal Collector Microagent Activities You can view log source metrics, trends, forwarders and log sources summary from the Stats tab. Collector Metrics Column Description Name Name of the Log Source Forwarder Define the current Forwarding connection with the Log Source Type Type of the Log Source: Real Time File, Remote File, Syslog, Command output, Hawk Rulebase, Hawk Metrics Status Status of the Log Source: Active: the connection is OK Err: the connection encountered an error Idle: the connection never received a message from the source or nothing at all for 24 hours Inactive: a Log Source is inactive Collection Connection parameters • Syslog: protocol/bound port • RT File: File name (no path) • Remote: File path • Cmd: Command • Hawk Rulebase (Rulebase name) • Hawk Metrics Collected Total number of collected message for a given period of time Filtered Total number of filtered message for a given period of time To Buffer Total number of forwarded message for a given period of time Current (mps) Current Log Rate Since UpTime (msg) Total number of collected messages since Universal Collector microagent is started Collector Trends Column Description Name Name of the log source Forwarder Name of the forwarding connection Current, 1 min, 5 min, 15 min, 24h, since uptime Log rate over different time periods. • n/a: value not available Forwarders & Log Sources Summary Column Description All Forwarding Connections Forwarding connection status: • OK: the forwarding connection works correctly • Error: there is an error on the forwarding connection • Total: total number of enabled forwarding connections All Log Sources (Syslog, Real-Time File, Remote File, Command Output, Hawk Rulebase, Hawk Metrics) Log Sources status: • OK: the log sources are answering correctly • Error: there is an error on the log source • Total: total number of log sources