The sensor main log and sensor DBMS instance logs use this format: <DATE> T[<THREAD ID>] F[<FILE NAME>] L[<LINE NUMBER>] <SEVERITY> <MESSAGE>.
Sample log message:
Tue May 27 2014 19:22:11.056 T[6504] F[Profile.cpp] L[935] NOTICE Loading profile
The logs contain these fields:
DATE — The time and date the log line was written. Time is formatted according to the local time zone of the machine where the sensor runs.
THREAD ID — Operating system thread ID. The sensor is a multi-threaded process. This field can be used to monitor the activity of a single thread.
FILE NAME, LINE NUMBER — Source file name and line number where the log line was called in the code. This helps Support and engineering to identify the code the log entry was generated from.
SEVERITY — Severity of the log entry. These are the available log severity levels in order of severity:
ERROR — Represents an unexpected error or conditions that the sensor has encountered. Log lines with the ERROR severity indicate a problem that requires review.
WARNING — Represents transient conditions that might later lead to an error. These log entries can provide insight into subsequent errors. These log entries do not require review if not accompanied by ERROR entries.
NOTICE — Sensor's default log level, useful information about the proper operation of the sensor.
INFO — Medium level of detailed information about sensor operation. This log level might be requested by Support for troubleshooting if DEBUG is generating too many log entries and logs are rolling over.
DEBUG — High level of detailed information about sensor operation. This log level is used by support and engineering teams for troubleshooting.
TRACE — Low level tracing information that might be requested by development teams. This log level is intensive and should not be set unless explicitly requested by Support.
MESSAGE — Log message can span multiple lines.
Note
The minimum severity level to write to the log file is configured on the Sensor properties page in the management console. The default and recommended level is NOTICE, meaning that NOTICE, WARNING and ERROR log lines are written to the log file. Changing to a log level below NOTICE can cause extensive logging and affect sensor resource utilization.