Setting up the event log file and size
The event log file is a repository that is stored locally on computers monitored by agents. It is not the same as the event cache, which is in memory.
When the cache becomes full, events are removed from it and placed in the repository file, which uses the following naming convention:
PEM_<hostname>_<port>.log
Naming the event log file
The /AgentSetup/pemLogName configuration variable determines the naming format of the event log. The log file is stored in PATROL_HOME\log.
Setting the event log file size
The /AgentSetup/pemLogSize configuration variable controls the maximum size in bytes of the event log. The PEM log file is a circular file. When the file fills up, the agent deletes older events to accommodate new ones.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*