Figure 1: Reading the EventLog
After pushing the button you will see this screen. It shows the progress of reading and collecting the events from the local/remote machines. You get the local computername displayed with an overall progress bar. Under this bar you can see 5 different machines of which the EventLog is currently read. Further you see the EventLog name of which the events are read at the moment. At the end of the line, there is a statur bar for this machine and a counter for the amount of gathered events.
Figure 2: Consolidating Events
This screen shows the progress of consolidating all gathered events for the report. Depending on the amount of events, this process could take a while.
Please Note:
The reason for only processing 5 machines at a time lies in the available performance. By connecting to 5 remote machines at a time, there already will be generated a lot of CPU load for creating these connections and remotely parsing the EventLog. Further, this has a lot of impact on the network connection of a machine. If you specify more that 5 machines for a report, then the additional machines will stay queued until one machine is finished. Then the next machine will be taken into this list and its EventLog will be processed.
While reading the EventLog of remote machines, the load on the machine running EventConsolidator could reach some limits. Further the whole process could take quite a while depending on how many events need to be gathered and consolidated for a report. So please stand by. As long as you can see the process working, everything is alright.