At a minimum you will require a Java Runtime version 5. See here for further details. Java runtimes are free and available for most platforms.
If you want to run Veduta 1.1 as a web application, you should have a suitable browser. Veduta 1.1 has been tested and is supported on the following browsers:
You don't need a database or a web server. Everything is contained within the Veduta download. No additional configurations for 3rd party applications are required.
Simply run the Veduta server thus:
Veduta gets its client/server configuration from the veduta.xml file in the specified configuration directory (specified using the -d option). Find the <network> section, and change the port as required.
Some OSes will restrict the port numbers that you can run on (depending if you're an admin or not).
See the client/server documentation for more info.
Veduta gets its client/server configuration from the veduta.xml file in the specified configuration directory (specified using the -d option). Find the <network> section, and change the hostname and port as required. Restart the client so it picks up the new configuration.
Some OSes will restrict the port numbers that you can run on (depending if you're an admin or not)
See the client/server documentation for more info.
See here for full instructions
If Veduta hasn't reported any problems it's either read all the log files, generated the required reports and is waiting for more activity. Alternatively it is reading a backlog of data. This often occurs when Veduta is first configured and pointed to a set of log files for the first time. Veduta will report when it's read a block of 1000 lines to indicate that it's busy.
Note that if you're running the in-memory database then this can happen each time you start up, and you may wish to move to the SQL database configuration (see the database documentation for more information on these options).
You may want to confirm that Veduta is working by increasing its log output. See below for more details.
There are two simple ways to avoid this problem.
The first is to configure Veduta to run with more memory. Simply invoke Veduta in the following fashion:
The second way to stop Veduta running out of memory is to configure Veduta to use a SQL database. This is a simple configuration change and documented here, together with a discussion of the pros/cons vs. an in-memory database.
Veduta can be configured to maintain the database to contain only 'recent' entries, or to maintain no more than a fixed number of log messages. e.g. you can configure Veduta to maintain only the last, say, 7 days of log data, and/or to maintain no more than 20,000 log messages per log file. If running with the in-memory database then it's recommended to set these options to avoid memory issues (see the database documentation for more information on this option.
Veduta logs relatively little unless it encounters an error. However you can increase the logging level to determine if it's spending time reading log files, generating reports etc. Veduta comes with a number of logging configurations that can be specified on the command line and will increase the logging level.
When changing your consumers.xml configuration, you need to clear the database on your filesystem. This will force Veduta to re-read your log files according to your new configuration. See here for more info.
By default Veduta will hold log files open whilst monitoring them (for efficiency purposes). This behaviour can be changed so that Veduta will only open the file each time it needs to read it.
In your consumers.xml configuration, set the appropriate mode.
<?xml version="1.0" encoding="UTF-8"?>
<consumers>
<consumer>
<file mode="closing">
<name>System Messages</name>
...
You must have the appropriate security permissions to read the security log. See the Microsoft support pages for this.
If you're running Internet Explorer v6 (SP2), you may see a message such as:
To fix the issue permanently, go to Tools->Internet Options... in Internet Explorer. Select the Advanced tab, and enable Allow active content to run in files on My Computer
See the Microsoft knowledge base for more information.
When running in it's webserver mode, Veduta is available on http://{your host name}:8080/. The port may be changed via the command-line options
In Veduta's file-writing mode, reports are written to a configured directory and given a name. Each report's name is suffixed with a date/timestamp. These reports can be browsed directly using a standard browser, or made available under a webserver for intranet/internet access.
The report location is defined in report.xml:
<file>
<name>examples/clientserver/results/system</name>
<file>
Veduta allows many different report formats to be used simultaneously. Changing and adding to these is straightforward. See the reports configuration page for more info.
Veduta is designed to minimally impact heavily-loaded and performance-sensitive systems. Veduta's main load-intensive functions are:
The work that Veduta does in reading log files can be reduced in various ways. Firstly, the interval between log file reads can be modified. Secondly, the use of filters can reduce the amount of log messages forwarded to a server. Thirdly, if Veduta is scanning directories for log files matching patterns, then old log files can be archived to a different location, removing Veduta's need to scan these log files needlessly.
Veduta will perform a lot of work on start-up, reading and checkpointing all log files. Once this is complete, Veduta will watch for file modifications at the configured intervals, and only then read the logs and forward data.
See the questions above regarding enabling different log levels. Increasing consumer logging will enable you to determine how often logging occurs, the quantity of information being gathered and, in the case of client/server operation, the amount of network traffic being generated.
Report generation is a more intensive operation, and if performance is an issue, it is recommended that the client/server option is used, and reports are generated on a less sensitive system. See the consumer configuration and client/server configuration page for more info.