Firmware: ALL
Collector: File Collector and Advanced File Collector
To configure a Microsoft SQL Server to send log messages to TLC, complete the following steps in Microsoft SQL Server Management Studio:
1. | Connect to your SQL Server instance. |
2. | In the Object Explorer, right-click the SQL Server instance and select Properties. |
3. | In the left pane of the Server Properties dialog (see Figure 74), select Security. |
4. | In the left pane of the Server Properties dialog, select Both failed and successful logins and click OK. |
Figure 74. Server Properties dialog
To configure your Windows timestamps:
1. | Open the Windows Region and Language tool. |
2. | In the Format tab: |
a. | From the Short time drop-down, select H:mm. |
b. | From the Long time drop-down, select H:mm:ss. |
To create a Custom View:
1. | Open the Windows Event Viewer. |
2. | Right-click Custom Views and select Create Custom View (see Figure 75). |
Figure 75. Create Custom View option in the Event Viewer
3. | In the Filter tab of the Event Viewer dialog (see Figure 76): |
a. | Select all Event level options. |
b. | Select By source, expand the Event sources drop-down, and select each option with an MSSQL prefix (e.g., MSSQL$SQLEXPRESS, MSSQLSERVER, etc.). |
Figure 76. Filter tab of the Event Viewer dialog
4. | Click OK and enter a name for the new Custom View. |
5. | Under Event Viewer in the Event Viewer window, right-click the Custom View and select Save Events in Custom View As. |
6. | In the Save As dialog, save the events as a CSV file and click OK. |
Tip |
You can also create this CSV file with the following PowerShell command: Get-EventLog -LogName Application -Source "MSOLAP`$SQLSERVER*", "MSSQL`$SQLSERVER*" | Export-Csv -Path C:\Users\Administrator\Desktop\SQLServerLogs.csv Where <path> is the full path to the directory in which you want to save the CSV file, and <filename> is the name of the file. |
---|
To create a Monitored Asset for the Microsoft SQL Server, complete the following steps in the TLC Console:
1. | If needed, add and enable the appropriate Collector in the Installed Modules tab of your TLC Manager (i.e., either the File Collector or Advanced File Collector; see Table 42). |
2. | Create a Monitored Asset for the SQL Server. |
To assign the File Collector to the Monitored Asset, complete the steps in Configuring a Monitored Asset with a File Collector. In the Advanced tab of the Monitored Asset's properties dialog:
a. | Select Get date from each line using the following REGEX and enter the following regular expression: |
(?<month>\d{1,2})/(?<day>\d{1,2})/(?<year>\d{4})\s(?<hour>\d{1,2}):(?<minute>\d{2}):(?<second>\d{2})
b. | Select the Tail File for new entries. |
To assign the Advanced File Collector to the Asset, complete the steps in Working with Log Sources for an Advanced File Collector and create a Log Source for the CSV file created in Step 3. Create a Custom View and Export Events. In the Timestamp Format field of the Log Source properties dialog, enter the regular expression above.
3. | Push updates to the Manager (see Pushing Updates to your Managers). |
Tips |
For more information about regular expressions and tailing, click here. For continuous collection of log messages from the SQL Server, create a Scheduled Task in Windows to regenerate the CSV file with new data. |
---|
Next |
If you are performing initial configuration of your TLC environment, see Configuring your TLC Environment. Otherwise, see Adding a Monitored Asset for a new Log Source. |
---|