PATROL event log

The PATROL Agent records events in a proprietary format. The latest events are stored in memory for quick access. This memory space is an array of structures that is called the PEM cache. As new events are created, older events are written to a log file called the PEM log. PATROL provides a utility that enables you to extract information about events from the log file. This topic details the following information:

Events stored

In the Standard Event Catalog, which is accessible through the console, you can determine whether an event is stored in the PEM log by setting the event's Life Expectancy. Storage options include delete if closed, delete if information, do not store, and store.

Contents of PATROL event log

The PATROL Agent Event log records the information shown in the following table for each event:

Location of PATROL event log files

The following table indicates the file name and path of the event log files:

Location of event log files