General Tab
Use the
tab to configure system-wide settings.- General Settings
- Advanced Features Settings
- Index Search Settings
- Syslog Port Settings
- Secure ULDP Settings
- Data Privacy Settings
- Global Retention Settings: Raw and Indexed Data
- Scheduled Report Settings
- SNMP Settings
- SNMP Trap Sink Settings
- SNMP Trap Collector
- System Performance Settings
- Usage Count
- Custom Logo Upload
- Build Details
General Settings
Field | Description |
---|---|
Originating Email | The email address that the appliance uses for the return address email notifications in alerts and scheduled reports.
Note: If this field or any of the
SMTP settings field are changed, you must re-synchronize triggers.
|
Concurrent Login Sessions |
Indicates the maximum number of concurrent login sessions allowed for each
LogLogic LMI user. After the permitted number of concurrent connections is reached, a message is displayed to the user on the next attempted login. The message indicates that the limit has been reached and requests the user to close one of the active sessions.
The default number of concurrent login sessions allowed per user is 100. Note:
|
Multiline Delimiter | Sets a character string to be used as line delimiter in multiline logs. |
Max. Widgets in My Dashboard | The system administrator can specify the maximum number of widgets that can be displayed on the dashboard. The default is 10.
If the recommended number of widgets (10) on My Dashboard or the amount of data to be displayed inside each widget exceeds the recommended value of 10, there might be graphical errors in the data displayed |
Purge stale devices | Enables the option to purge stale devices based on the last time data was received. For more information, see Purge Stale Devices. |
Purge Stale Devices Period | Specify the number of days after which stale devices must be purged. |
SSH Daemon at Startup | The SSH Daemon provides access to the appliance's Command Line Interface (CLI) from SSH clients.
By default, the SSH Daemon is turned on in the appliance. Click the slider to No to disable the SSH Daemon when you reboot the appliance. For details about the Command Line Interface (CLI), see Command Line Interface (CLI). |
Auto-identify Log Sources | Automatically detects any syslog log sources connected to the appliance. This includes:
To view all identified log sources, use
. If you do not enable this option, you must manually add the following log sources.
To manually change a general Syslog log source type:
The Type column displays the device type you associated with the auto-identified log source. If you enable Auto-identify Log Sources and you have several thousand devices configured that need to be auto-identified, routing rules and alerts can slow the auto-identify process down. |
DNS Resolve All Device Names | Updates the DNS Resolve Flag for multiple devices. |
Full Text Indexing | Allows indexing of data. You can set this for your appliances independently. If enabled, all data is indexed.
To retain the index data, configure rules from .To use message signatures and tags, you must enable indexing from . |
Allow Disabling of admin Super User | Allows an admin user to disable the admin super user account. For more information, see Managing Users. |
UI Verbose Logging | Enables or disables logging detailed error messages on the GUI. The default value is
Yes.
If you select No, detailed logging is disabled, and a generic message is displayed instead of error or exception details. You can view the detailed information in syslog files by accessing the machine through SSH. |
Log parsing for reports | Enable or disables parsing in
LogLogic LMI, so that no content is added to the Real Time database-driven reports.
The default value is Yes. This feature is only available on LogLogic EVA, LogLogic LX Appliances, and LogLogic MX Appliances, and in effect makes them similar to a LogLogic ST Appliance. |
Manage Device | Enables or disables the ability for users to configure or add devices under | . This setting overrides the Manage Devices privilege provided to a user or role, except to the admin super user account.
Accept Detail | Allows drill down for the Real Time and Summary detail reports. |
Advanced Feature Settings
Field | Description |
---|---|
Advanced Features |
Enables or disables the Advanced Features. The default is
Off (disabled).
Select On to enable the following Advanced Features:
For information about enabling advanced features using the CLI, see the system logu command. |
Monitoring Console | Enables or disables the monitoring console. After enabling the monitoring console, the
To enable or disable this feature using the CLI, see the system monitoring_console command. |
menu is available to users and they can use the monitoring console.
Advanced Aggregation | Enable or disable the Advanced Aggregation features. After enabling the Advanced Aggregation option, the
By default, Advanced Aggregation is switched off. This feature can be enabled only if the Advanced Features option is enabled. If Advanced Aggregation is switched on before upgrading your setup, it remains switched on after the upgrade. Important: Before disabling Advanced Aggregation, ensure that you delete or disable any advanced aggregation rules to avoid storing unnecessary aggregated data.
To enable or disable this feature using the CLI, see the system advanced_aggregation command. |
tab is visible to users and they can use the Advanced Aggregation features.
Monthly Index |
Enables or disables the monthly index feature. The default is
No.
This feature can be enabled only if the Advanced Features option is enabled. For information about enabling monthly index using the Command Line Interface (CLI), see the system monthly_index command. |
Monthly Index Load Divisor | When the monthly index is so large that the memory issues occur when loading the terms during an Advanced Search and when Advanced Search and Monthly Index are both enabled, this parameter controls what fraction of the Monthly Index terms are loaded into memory during an Advanced Search.
The default value is 1 (load all terms) with a possible range of 1-5, where 5 indicates 1/5th, which means load only 20% of the terms in memory. Note: Reducing the fraction of terms loaded into memory helps with memory issues. However, it has a performance impact on searches where no memory issues exist, because the frequency of disk access during an Advanced Search increases.
For information about configuring the monthly index using the CLI, see the system monthly_index_load_divisor command. |