Analytics

Feature availability

Available in Resilio Active Everywhere 6.0 and newer.

Advanced analytics is a new framework for storing and processing events data that provides improved performance and scalability. It allows you to perform more complex queries and analysis on the events data that the Management Console receives from Agents.

Note

The events that Agents send to the Management Console are controlled by the Event filter parameter in the Agent profile.

UI Overview

Queries

Run predefined audit queries about your Resilio Active Everywhere deployment.

Tables

Retrieve Audit logs, Events, File events and Job run information.

Saved Views

Define custom views to save filtering and column settings for future use.

Filtering

Use built-in filters to narrow down the events data based on specific criteria.

Columns, Filters and Details panels

Click Columns to customize the columns displayed in the events table.

Click Filters to access built-in filtering options and create custom filters to narrow down the events data.

Click Details, then click a row or a cell to view detailed information about a specific event, in text or JSON format.

Define custom views

To define a custom view:

1. In Management Console, select Events > Saved Views.

2. Define search conditions, then click Save.

   

3. Enter a name for the view and click Save.

   

Use cases

Determine who deleted a file and when

To determine who deleted a file and when:

1. In the Events view, select File events.

2. Define filtering conditions:

   • Event name: FILE_DELETED
   • File path: name of the file that you want to retrieve

3. Click Run.

4. Analyze data in the following columns:

   • Timestamp - Find out when the file was deleted.
   • AgentName - Find out which Agent deleted the file.

Determine the list of files in a Job that has been deleted

Prerequisites:

• The name of the Job that has been deleted.

To determine the list of files in a Job that has been deleted:

1. In the Events view, select File events.

2. Define filtering conditions:

   • Event name: FILE_ADDED

   • Job run name: name of the Job

     Tip

     Select the Job from the list.

     

3. Click Run.

4. Assemble the list of files that have been added to the Job in question based on the FilePath and FileName columns.

Determine the list of files that have been synchronized in a specified time period

To determine what files have been synchronized in a specified time period:

1. In the Events view, select File events.

2. Define filtering conditions:

   • Event name: FILE_UPDATED, FILE_PRE_SEEDED, FILE_DOWNLOADED

     Note

     • FILE_UPDATED
     • FILE_PRE_SEEDED - Indicates that the file was not transferred over network but was pre-seeded on the Agent, for example, by copying the file to the Job folder.
     • FILE_DOWNLOADED - Indicates that the file was transferred over network and downloaded to the Agent.

   • Timestamp: custom time interval

     

3. Click Run.

Find out what files have been locked and by whom

To determine what files have been locked and by whom:

1. In the Events view, select File events.

2. Define filtering conditions:

   • Event name: FILE_LOCKED, SHARED_LOCK_OPEN

3. Click Run.

4. Analyze the list of locked files and the Agents that locked them.

Investigate filename conflicts

To determine why a filename conflict has occurred:

1. In the Events view, select Events.

2. Define filtering conditions:

   • Event name: FILE_CONFLICT

3. Click Run.

4. Analyze the results.

Troubleshoot high network and storage utilization

High network and storage utilization are usually caused by frequently updated and downloaded files. To troubleshoot high network and storage utilization, determine the most frequently updated and downloaded files:

1. In the Events view, select File events.

2. Define filtering conditions:

   • Event name: FILE_UPDATED, FILE_DOWNLOADED
   • Timestamp: custom time interval

3. Click Run.

4. Analyze instances where these events occur multiple times for the same file.

Track down the latest version of a specific file

To find the latest version of the file:

1. In the Events view, select File events.

2. Define filtering conditions:

   • Event name: FILE_UPDATED, SHARED_LOCK_OPEN, FILE_LOCKED

     Note

     Apply the NOT IN operator for these events to exclude them from the results.

   • File path: name of the file that you want to retrieve

3. Click Run.

4. Analyze FILE_DOWNLOADED events to determine which Agent has the file in question.

Find information on a specific file

To find information on a specific file:

1. In the Events view, select File events.

2. Define filtering conditions:

   • File path: name of the file that you want to retrieve

3. Click Run.

4. Analyze the results.

Determine if a file was deleted

To determine if a file was deleted, identify the Agent that deleted the file, and find out when it happened:

1. In the Events view, select File events.

2. Define filtering conditions:

   • Event name: FILE_DELETED, FILE_ARCHIVED
   • Job run name: name of the Job

3. Click Run.

4. Analyze data in the following columns:

   • Timestamp - Find out when the file was deleted.
   • AgentName - Find out which Agent deleted the file.
   • FilePath and FileName - Find out which file was deleted.

Retrieve events history for a specific file

To retrieve events history for a specific file for troubleshooting purposes:

1. In the Events view, select File events.

2. Define filtering conditions:

   • File path: name of the file that you want to retrieve events for

3. Click Run.

4. Analyze events to determine what and when has happened to the file in question, including when it was added, updated, downloaded, locked, and by whom.

A file has not been downloaded due to insufficient permissions

To retrieve files that have not been downloaded due to insufficient permissions:

1. In the Events view, select File events.

2. Define filtering conditions:

   • Event name: CANT_MOVE_SUFFIX, FILE_NO_PERMISSIONS

3. Click Run.

4. Analyze events to determine the files that Agents cannot download due to insufficient permissions.

Audit Agent connection attempts

To retrieve information on Agent connection attempts:

1. In the Queries view, select Audit, then hover over Agent connection attempts and click Run.
2. (Optional) Define filtering, then click RUN to retrieve the results that match the filtering conditions.