Running Logfu on a Connector

Run Logfu on a connector to parse ArcSight logs and generate an interactive visual representation of the information contained within the logs.

To run Logfu on a connector:

  1. Click Node Management.

  2. In the navigation tree, browse to the connector to which you wish to run Logfu. In the management panel, the Connector summary tab displays.

  3. On the Connector summary tab, click Run Logfu.

  4. The Logfu progress window is displayed as system data logs are retrieved and analyzed. Data is then displayed by Group, Field, and Chart.

    • In the Group box, choose a data type to view. The Group box lists all connectors within the chosen container, plus many other data types, such as memory usage and transport rates.

    • Next, choose one of the Group box data points. Depending on which data point you chose, a list of fields appears in the Field box below.

    • Choose a field to view. A graphic chart appears in the Chart box, providing rate and time information. The key at the bottom of the Chart box defines the data points mapped in the chart.

    • To choose a different data point for analysis, click Reset Data.

  5. When complete, close the Logfu display window.