Enterprise SIEM, Centralized Log Management, Security, Compliance, Server Monitoring and Uptime Monitoring Software
Table of Contents

Data Providers

Data Providers have two purposes:

  • To store log entries and SNMP Traps for a period of time such as 1 year.
  • To configure database connections for use with Database Monitoring Templates.

How it works:

When storing log entries for long periods of time, such as one year, log entry tables will become quite large. Running daily reports, such as Account Management Reports, require table scans to isolate the target log entries. If we were to store each log in a single table for the entire year, daily reports would be unnecessarily table scanning irrelevant data burning CPU, memory, power and time. For this reason, Corner Bowl saves log entries to two tables is separate databases. This design has two advantages. First, daily reports only need to execute table scans against recent data, and second, archive databases can be implemented on alternate hardware, with different specifications, while simultaneously isolating CPU intense archive reporting from production systems. Corner Bowl Server Manager implements these two databases in the Explorer View under Data Providers. By default, the databases are called the Primary Log Database and the Archive Log Database respectively.

By default the Log Database and Archive Log Database are pre-configured to use an embedded database, SQLite, rather than a network database such as SQL Server or MySQL.

Both SQLite and the Corner Bowl Flat-File Format are ideally suited for Air-Gapped networks while we suggest corporate networks use either SQL Server or MySQL.

To configure the Log Database:

  • From the Explorer view, expand Data Providers. By default, The following two nodes are listed, Log Database and Archive Log Database.
  • Right click on the database you would like to configure, then select Properties. The Data Providers Properties view displays.
  • From the Data Providers Properties view, use the Name text box to specify a unique name.
    Click the Auto Generate button to automatically generate a name. If you click this button after you have set the data provider settings, the generated name reflects the settings you have selected (e.g. Primary Log Database (SQL Server)).
  • Use the Type drop-down to select the database type. The following Types are available:
    TypeDescription
    File SystemA proprietary Corner Bowl Software developed binary flat file system.
    SQLiteA self-contained open-source SQL database engine.
    Microsoft SQL ServerMicrosoft SQL Server v2022-2012.
    MySQLOracle MySQL v5.7-8
    ElasticsearchOpen Source NoSQL database.
  • Use the Role drop-down to select how you would like to use the database. The following Roles are available:
    RoleDescription
    Log DatabaseContains the latest consolidated log entries. (e.g. log entries less than 15 days old).
    Archive Log DatabaseContains archived consolidated log entries previously saved to the Log Database (e.g. log entries 15 days and older).
    Auxiliary Log DatabaseContains auxiliary or backup consolidated logs. Typically used to view old database backups for auditing purposes.
    History DatabaseOnly available when using the File System. Contains monitor and report execution history (e.g. execution time, state, and results such as the number of entries downloaded).
    NoneThis setting has two purposes. First, to be used for Database Monitoring. Second, to be used to maintaining database connection settings for later use.
  • Use the rest of the controls to set the Type specific settings. For more information see:
  • Click the Save button to save the settings.
    When saving a Log Database or Log Archive Database, if the database does not exist, the database and several tables are automatically created.

To configure a database connection to be used by a Database Monitoring Template:

  • From the Menu Bar, select File | New. The Create New Object View displays.
  • From the Create New Object view, select Data Provider. The New Data Provider view displays.
  • From the New Data Provider view, use the Type drop-down to select the database type.
  • From the Role drop-down, select None.
  • Use the rest of the controls to set the Type specific settings.
  • Click Save to save your changes.

Related Topics

Data Provider Properties

Corner Bowl File System Properties

SQLite Properties

SQL Server Properties

MySQL Properties

Elasticsearch Properties

Database Monitoring Templates