How to run dtrace using triggers with Enterprise Vault (EV)

Article:TECH48505  |  Created: 2006-01-17  |  Updated: 2014-04-10  |  Article URL http://www.symantec.com/docs/TECH48505
Article Type
Technical Solution


Issue



How to run dtrace using triggers with Enterprise Vault (EV)


Solution



When troubleshooting intermittent issues, it is necessary to set up DTRACE to begin capturing only if certain criteria are met. The use of trigger words will help to reduce the size of the DTRACE log because only relevant content will be captured.

To setup DTRACE,  review the technical article TECH38122 in the Related Articles section below.
The following screen capture shows a simple trigger of "restarting failed process" (Figure 1). The actual search terms will vary depending on the problem being researched.

Figure 1
 

After enabling dtrace on the desired process, the following parameters should be set to enable a trigger on the words "restarting failed process":


DT>trigger

Manage watch entry trigger.     (? for help)

DT Trigger>include "restarting failed process"
'restarting failed process' - added to filter include strings

DT Trigger>q

DT>watch

Watch Trace Output

Maximum number of snapshots [3[ > *enter # of times to capture*
Log file [DTraceWatch.log] > *enter logfile name if desired*
Number of trace entries to display after trigger entry [20] >*set # of lines*
Apply display filter? [Yes/No] (Yes)>

Watching is enabled to 'C:\Program Files\Enterprise Vault\DTraceWatch.log'     (Use 'watch' to disable)


DT>
 



Legacy ID



284344


Article URL http://www.symantec.com/docs/TECH48505


Terms of use for this information are found in Legal Notices