Audit Logger. Before storing a log message received from a Collector in the Audit Logger File Store, TLC temporarily queues the message in the Audit Logger Cache.
To view a list of Log Sources with log messages currently in a Manager's Audit Logger Cache:
| 1. | In the side bar, select Events >Audit Logger. |
| 2. | Select the Logger Cache tab. |
| 3. | From the Audit Logger name drop-down, select the Manager's Audit Logger. |
TLC presents the log messages in the cache (see Table 74).
To move the log messages to the Audit Logger File Store, click Flush Cache.
To update the list of Log Sources with the latest data from the Audit Logger Cache, click Refresh.
|
Note |
TLC automatically flushes the Audit Logger Cache if: No new log messages have been added to the cache in the past 30 minutes. (TLC checks the cache for new messages every 10 minutes.) New messages are added to the cache and the size of the cache exceeds 2MB. The TLC Manager service stops. The number of files in the zip buffer reaches 50. Memory contains more than 20 zip-file buffers. |
|---|
|
Field/Column |
Description |
|---|---|
|
IP Address |
The IP address of a Log Source with log messages in the Audit Logger Cache. |
|
Asset Name |
The name of the Log Source's Asset. |
|
Size |
The amount of cache memory consumed by the Log Source's messages. |
|
Count |
The number of log messages in the cache from the Log Source. |
|
Timestamp |
The date and time of the oldest log message from the Log Source (i.e. the date and time when the Log Source created the message). |