Getting Started
- System Requirements
- Installation
- Assign Service Logon As Credentials
- Registration
- Version Support Policy
Agent-Based Management
Common Tasks
- Account Lockout Monitoring and Reporting
- Event Log Archiving for JSIG and CMMC Compliance
- Exporting and Importing Configuration Objects
- RDP Session Monitoring and Reporting
- Merging Logs
- Amazon S3 Bucket Support
- Azure File Share Support
Data Providers
- Data Provider Properties
- SQLite Properties
- MySQL Properties
- Microsoft SQL Server Properties
- File System Properties
Directory Services
Auditing
- Audit Work Items
- Self-Auditing
- Group Policy Auditing
- Password Expiry Auditing
Hosts
- Adding Hosts
- Host Properties
- Batch Update Hosts
- Agent Properties
- Logon As Properties
- SFTP Properties
- FTP/S Properties
- SNMP Device Connection Properties
- WMI
- Contact
- Exclusions
- Inventory
- Docker
- Host Assignments
Templates
- Template Properties
- Batch Update Templates
- Assign Templates
- Log Management Templates
- SCAP Compliance Monitor
- Active Directory User Monitor Templates
- File and Directory Monitor Templates
- Windows Monitor Templates
- Network and Application Monitor Templates
- SSL Certificate Monitor Templates
- Database Templates
- Email Monitor Templates
- SNMP Monitor Templates
- Windows Accounts Templates
Monitors
- Monitor Hierarchy
- Temporarily Suppress Monitors Actions
Reports
- Report Properties
- Security Reports
- Generic Log Reports
- File and Permission Reports
- Summary Reports
- Artificial Intelligence Reports
  - AI Anomaly Detection Report
  - AI Anomaly Detection Report (Template Triggers)
Auto-Configurators
Filters
- Simple Filters
- Complex Filters
Actions
- Database Actions
- Desktop Actions
- Disconnect RPD Session Actions
- Email Actions
- Event Log Actions
- Executable Actions
- File Actions
- IIS IP Address Restriction Actions
- Microsoft Teams Actions
- PowerShell Actions
- Report Actions
- Service Actions
- SMS Actions
- SNMP Trap Actions
- Syslog Actions
- Template Actions
- Action Variables
Schedules
- Fixed Schedules
- Range Schedules
- Real-Time Schedules
Environment Variables
Options
- Email Settings
- Security Settings
- Syslog Server Settings
- SNMP Trap Server Settings
- Log Viewer Settings
- Web Proxy Settings
- Miscellaneous Settings
- Logging Settings
SNMP
- SNMP Browser
SSH Shell
Syslog
System Reset
Shared Views
- Active Directory User and Group Filters
- Assign Actions
- Assign Azure Audit Logs
- Assign Consolidated Logs
- Assign Directories
- Assign Disks
- Assign Event Logs
- Assign Files
- Assign Services
- Assign Shares
- Auto-Config Host Assignment Properties
- Define CSV and W3C Log Entry Columns
- Define Log Entry Columns
- Define Log Entry Columns with Regular Expressions
- Executable Status
- Executable Timeline
- Explicitly Assigned Logs
- File Explorer
- General Executable Properties
- Report Columns
- Report Date/Time Ranges
- Report Security Event Log Filters
- Select Folder or File
- Target Files and Sub-Directories
Command Line Interface
Server Configuration
Agent Configuration
Troubleshooting
- Arithmetic Overflow
- Access Denied
- MySQL: Fatal error encountered during command execution
- Invalid Class
- No Such Interface Supported
- Quota Violation
- The File Exists Errors
- The Interface is Unknown
- The RPC Server is Unavailable
- NetBIOS Errors
Terminology

Merging Logs

Merging logs is the process of displaying centrally consolidated logs into a single view enabling network administrators and auditors to view a complete picture of network, system and user activity across multiple servers, workstations, and network devices.

Corner Bowl Server Manager enables users to quickly merge multiple logs into a single view for auditing and analysis.

In this Topic

How to merge multiple logs into a single view
The Merge Properties View
The Merge Log Viewer

Choose one of the following methods to pre-select Windows Event Logs to merge:

Method	How To
Menu Bar	From the Menu Bar, select Tools then Merge.
Host Node	From the Explorer View, expand the root Hosts node, navigate to the target host, then right click and select Merge.
Monitor Node	From the Explorer View, expand the root Hosts node, navigate to the target host, expand, then expand Templates, select any Event Log Consolidation Template, then right click and select Merge.
Data Providers Node	From the Explorer View, expand the root Data Providers node, navigate to any host group or host, then right click and select Merge.

The Merge Properties View

Use the Merge Properties View to select logs to merge and apply log viewer options.

Use the Log Type drop-down to select the type of logs to merge, either Event Log or Syslog.

Note

To merge logs of different types, see SIEM Reports.

Use the Levels controls to filter specific levels.
Use the Filter drop-down to select a filter to apply.
Use the Paging controls to select the number of days to display on each page and set the initial date to view.

Note

When viewing multiple days per, the viewer displays log entries from the initial date then the number of days selected backwards in time.

Use the Auto-advance checkbox to automatically advance to the next page when no entries are returned that match your date and search criteria.
Use the Keyboard auto-advance checkbox to automatically advance to either the next page or the previous page when using the keyboard to scroll up and down through log entries.
Click OK to query, filter and merge the log entries into the Merge Log Viewer.

Merge Properties View

The Merge Log Viewer

Merge Log Viewer

Table of Contents

Merging Logs

In this Topic

To merge multiple logs into a single view:

The Merge Properties View

The Merge Log Viewer