Hi, I have the same problem, we have an event corilation system here which is pritty much unusable for me as it is all Java based, but it is supposed to provide this information in a specific report which highlights areas that need looking into. However, in practise this doesn't really help as it requires constant manipulation of the system to keep right so you don't just end up with a load of dross. Andrew. ________________________________________ From: Blind-sysadmins [blind-sysadmins-bounces@lists.hodgsonfamily.org] on behalf of Darragh OHeiligh [Darragh.OHeiligh@Oireachtas.ie] Sent: 11 July 2012 11:52 To: Blind sysadmins list Subject: [Blind-sysadmins] Information overlode. Hello, I'm managing more and more systems here but I cant keep up with all the notifications. For example, I just cleared out over six thousand emails from a folder that is used for air conditioning and environment notifications since the 15th of May. that's just one system among ....... a lot. I've notifications from SCOM, VMWare, What's up gold, Diskeeper, Event manage engines syslog, Netbots, Backups, the mail gateway, the SAN and more. I know there are others out there that have the same amount of responsibilities so my question is, how do you stay up to date with the events. I am tired of being on the back foot. A few years ago I was able to tell when disk utilization was spiking on a server. Now, I'm way behind. There are just too many alerts coming in. It's not that the network is in bad condition. For example, one of the application servers is showing high CPU and disk utilization this morning. It could be just that a user is hammering away at it but it could be a dodgy application as well. Eitherway, I need to be aware of it. You known in linux you can type tail -f *.log in a certain directory and you'll see all the log files as their written? I want something like that for all my systems. Unrealistic, I know, but I'm open to ideas. Everything is tied up in red tape here but there's nothing that cant be done after a well written change request is provided. Any suggestions? Regards Darragh Ó Héiligh Fujitsu Offices of the Houses of the Oireachtas, Fredrick Building, South Fredrick Street, Dublin2 Telephone: +353 (1) 618 3559 Email: darragh.oheiligh@oireachtas.ie Internet: http://www.oireachtas.ie _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins