By default the OMS agents I have installed on my servers are only going to gather heartbeat information. While that is helpful in letting me know that the server is up, I need to gather more information in order to have a better view into my environment. Let’s increase what is gathered.
First off, I open my OMS Dashboard and click the Settings button.
In the settings area, select Data | Windows Event Logs
I’m going to add a couple of Windows Event Logs that I think may yield some interesting information
- Enter “Application” and click the + button
- Enter “system” and click the + button
Next, I select Data | Windows Performance Counters
OMS is suggesting some performance counters for me to gather. I’ll go with the suggestion. Click the Add the selected performance counters button.
In the upper left corner of the settings page is a Save button. Click the Save button to save all our changes. OMS is now going to communicate down to the agents I installed, and tell them to start gathering this new data.
Wait a few minutes, then go back to the main dashboard and click Log Search
Enter * and look at the different types
You can see that I”m now gathering four different types of data: Perf, Heartbeat, Usage, and Event. Woo Hoo! I have more data now that I can query. At this point, I could start writing my own queries to retrieve the information I’m interested in, but why do that when there are prebuilt solutions you can easily install and configure. Over the next several posts, we are going to look at one of those, the Security and Audit solution.