Subtitles of the Movie

To get to the Event Log Consolidator you'll click the Access Gateway node in the left-hand side, you'll right-click, you'll choose All Tasks and you'll choose to View Events. So now you see the rather empty Event Log Consolidator. As I mentioned, this is a consolidator for multiple event logs in your Access server farm. It has to go and actually collect those event logs for you, so what you'll do is you'll choose File, and Configure, and you'll choose the Polling Interval in seconds that defaults to 15, and then to kick everything off you go to File, and Collect. You'll notice that when you do this it presents you the events from all the event logs from all of your Access servers by session. For example, here is our logon session that we've just done. If we click on there it gives you a little brief synopsis that says No problems found. Double-click to see the detailed Event Log, so you'll double-click it, and you'll see this is a much easier format to read than the native Windows Event Log Viewer, and also it has the advantage of being, again, against all of the servers in the Access server farm, not just one, so that if your Access servers happen to be behind the Load balancer, or you have multiple Access servers that may answer to the same Logon Point you don't have to try to figure out exactly which server, all you have to know is the approximate date and time that the user logged in and their user name. If you click on any one of the entries you'll actually see the error message that the user would have gotten as well as a long string of what looks to be garbage, and to be quite honest, I don't really know what that is. Also, from the Main Event Log Consolidator Window you have an option for several reports: User Access Reports, Resource Access Reports, et cetera Obviously there's not a whole lot of data to report on right now, but for example we could choose a Resource Access Report and here is our Resource Access Report. We can see that the Source File Share has been accepted 1 time. Active Directory authorization was successful once. Here is our image host that we didn't put in our Web Resource. It had 23 denials. So as you can see it's real easy to generate reports for management or for your own edification if you happen to see a whole bunch of denied access to a particular Web host you'll realize you may have a Web Resource defined incorrectly. The Event Log Consolidator is a very powerful tool and can really make things easier for a Citrix administrator. Obviously logging every bit of Access information into the Event Log puts quite a strain on your Access server, so obviously when you're done troubleshooting you'll want to go into the Farm Properties and turn off all of the events so that you're not just completely bogging down your Access server. You do that and you hit OK. And this concludes our discussion of Event Logging.