Getting Started
- System Requirements
- Installation
- Assign Service Logon As Credentials
- Registration
- Version Support Policy
Agent-Based Management
Common Tasks
- Account Lockout Monitoring and Reporting
- Event Log Archiving for JSIG and CMMC Compliance
- Exporting and Importing Configuration Objects
- Importing Event Log Files for JSIG and CMMC Auditing
- Merging Logs
- RDP Session Monitoring and Reporting
- Amazon S3 Bucket Support
- Azure File Share Support
Data Providers
- Data Provider Properties
- SQLite Properties
- MySQL Properties
- Microsoft SQL Server Properties
- File System Properties
Directory Services
Auditing
- Audit Work Items
- Self-Auditing
- Group Policy Auditing
- Password Expiry Auditing
Hosts
- Adding Hosts
- Host Properties
- Batch Update Hosts
- Agent Properties
- Logon As Properties
- SFTP Properties
- FTP/S Properties
- SNMP Device Connection Properties
- WMI
- Contact
- Exclusions
- Inventory
- Docker
- Host Assignments
Templates
- Template Properties
- Batch Update Templates
- Assign Templates
- Log Management Templates
- SCAP Compliance Monitor
- Active Directory User Monitor Templates
- File and Directory Monitor Templates
- Windows Monitor Templates
- Network and Application Monitor Templates
- SSL Certificate Monitor Templates
- Database Templates
- Email Monitor Templates
- SNMP Monitor Templates
- Windows Accounts Templates
Monitors
- Monitor Hierarchy
- Temporarily Suppress Monitors Actions
Reports
- Report Properties
- Security Reports
- Generic Log Reports
- File and Permission Reports
- Summary Reports
- Artificial Intelligence Reports
  - AI Anomaly Detection Report
  - AI Anomaly Detection Report (Template Triggers)
Auto-Configurators
Filters
- Simple Filters
- Complex Filters
Actions
- Database Actions
- Desktop Actions
- Disconnect RPD Session Actions
- Email Actions
- Event Log Actions
- Executable Actions
- File Actions
- IIS IP Address Restriction Actions
- Microsoft Teams Actions
- PowerShell Actions
- Report Actions
- Service Actions
- SMS Actions
- SNMP Trap Actions
- Syslog Actions
- Template Actions
- Action Variables
Schedules
- Fixed Schedules
- Range Schedules
- Real-Time Schedules
Environment Variables
Options
- Email Settings
- Security Settings
- Syslog Server Settings
- SNMP Trap Server Settings
- Log Viewer Settings
- Web Proxy Settings
- Miscellaneous Settings
- Logging Settings
SNMP
- SNMP Browser
SSH Shell
Syslog
System Reset
Shared Views
- Active Directory User and Group Filters
- Assign Actions
- Assign Azure Audit Logs
- Assign Consolidated Logs
- Assign Directories
- Assign Disks
- Assign Event Logs
- Assign Files
- Assign Services
- Assign Shares
- Auto-Config Host Assignment Properties
- Define CSV and W3C Log Entry Columns
- Define Log Entry Columns
- Define Log Entry Columns with Regular Expressions
- Executable Status
- Executable Timeline
- Explicitly Assigned Logs
- File Explorer
- General Executable Properties
- Report Columns
- Report Date/Time Ranges
- Report Security Event Log Filters
- Select Folder or File
- Target Files and Sub-Directories
Command Line Interface
Server Configuration
Agent Configuration
Troubleshooting
- Arithmetic Overflow
- Access Denied
- MySQL: Fatal error encountered during command execution
- Invalid Class
- No Such Interface Supported
- Quota Violation
- The File Exists Errors
- The Interface is Unknown
- The RPC Server is Unavailable
- NetBIOS Errors
Best Practices
Terminology

Schedules

A Schedule is a configurable and assignable object that defines the frequency to run executables such as Templates, Reports and Auto-Configurators (e.g. Daily at 6:00 AM or every 5 minutes).

How it works:

Every time a change is made to the system that could potentially change the execution schedule (e.g. a Template is assigned to a Host), Server Manager re-calculates the next execution time for each assigned executable.

Note

Server Manager includes numerous sample Schedules. You have the option of assigning these schedules to executables as is, modifying them or if prefer, removing all of them and defining your own. To view the sample schedules, from the Explorer View, expand the Schedules node then select Sample Schedules.

To create a schedule:

From the Menu Bar select File | New. The Create New Object View displays.
From the Create New Object View, select Schedule. The Schedule Properties view displays.
Configure the schedule.
When you have finished configuring the schedule, click the OK button to save.

Available Schedule Types

Type	Description
Fixed	Fixed Schedules define specific times to execute assigned executables such as Templates and Reports (e.g. every hour at 30 minutes past the hour). Fixed Schedules support seconds, minutes, hourly, daily, weekly and monthly frequencies.
Range	Range Schedules define a range of available times to execute assigned executables such as Templates and Reports (e.g. every hour at anytime within each hour). Range Schedules support minutes, hourly, daily and weekly.
Real-Time	Real-Time Schedules defines a schedule that continuously runs. Real-Time Schedules are used for Templates that require a subscription to events for example Syslog Consolidation and Monitoring, SNMP Trap Consolidation and Monitoring and Real-Time Event Log Monitoring.

Exclusion Periods

Each Schedule optionally enables you to assign exclusion periods. Exclusion periods enable you to automatically disable executables at pre-determined days of the week and times of the day. Exclusion periods can be assigned to Schedules and Hosts. For more information about assigning exclusion periods to hosts see:Host Properties

Best Practices: Load Balancing with Range Schedules

Imagine a mid-size environment with 100 servers. Your task is to consolidate Event Log entries to a SQL Server database. If you configure Server Manager to download daily at 2:00 AM and each server contains 3 logs of interest, at 2:00 AM Server Manager will create 100 threads, one for each monitor, and commence downloading of the Event Log entries. Understandably the log consolidation database will more than likely bottleneck and timeout while attempting to commit the Security Event Log entries.

To alleviate the pressure on the log consolidation database as well as the server hosting Server Manager, Server Manager includes range scheduling, a very powerful function to evenly distributes download, monitor and report execution over time. You can enable range scheduling by setting a Schedule's type to Range.