The event log file is a repository that is stored locally on computers monitored by agents. It is not the same as the event cache, which is in memory.
When the cache becomes full, events are removed from it and placed in the repository file, which uses the following naming convention:
PEM_<hostname>_<port>.log
The /AgentSetup/pemLogName configuration variable determines the naming format of the event log. The log file is stored in PATROL_HOME\log.
Format and type of data | Text string (no spaces), not applicable |
Default value | PEM_<hostname>-<portnum>.log |
Minimum and maximum | Not applicable |
Dependencies | None |
Recommendation | If you change the name, use a name that indicates the log's purpose and origin. |
The /AgentSetup/pemLogSize configuration variable controls the maximum size in bytes of the event log. The PEM log file is a circular file. When the file fills up, the agent deletes older events to accommodate new ones.
Format and type of data | Numeric, bytes |
Default value | 1024000 |
Minimum and maximum | 20480 and none |
Dependencies | None |
Recommendation | A larger file size stores more events in the event history but consumes more system resources. Carefully consider the size of the file. |