Running Logfu on a Connector
Run Logfu on a connector to parse ArcSight logs and generate an interactive visual representation of the information contained within the logs.
To run Logfu on a connector:
-
Click Node Management.
-
In the navigation tree, browse to the connector to which you wish to run Logfu. In the management panel, the Connector summary tab displays.
-
On the Connector summary tab, click Run Logfu.
-
The Logfu progress window is displayed as system data logs are retrieved and analyzed. Data is then displayed by Group, Field, and Chart.
-
In the Group box, choose a data type to view. The Group box lists all connectors within the chosen container, plus many other data types, such as memory usage and transport rates.
-
Next, choose one of the Group box data points. Depending on which data point you chose, a list of fields appears in the Field box below.
-
Choose a field to view. A graphic chart appears in the Chart box, providing rate and time information. The key at the bottom of the Chart box defines the data points mapped in the chart.
-
To choose a different data point for analysis, click Reset Data.
-
When complete, close the Logfu display window.