Open a Storage Folder Without a Server

When Manager is not connected to a server, it can open a syslog storage folder directly and read the storage files itself.

Use this to:

  • ► View messages from a storage archive file after you extract it.

  • ► View a storage copied from another computer.

  • ► Generate reports from a storage opened this way.

  • ► View a Syslog Watcher 6 storage that was not migrated.

Open a Storage Folder

  1. If Manager is connected to a server, in the Server section of the main toolbar, click Server Server → Disconnect and confirm.

  2. In the Storage section of the main toolbar, click Storage Storage → Open Storage Folder…​

  3. In the Select Storage Folder window, select the folder that contains the storage index file: storage7.index, or storage.index for a version 6 storage.

Manager opens the Storage tab, and the window title shows the folder path. Changes to storage objects (originators, groups, parsers, view layouts, and so on) are saved in the opened folder.

By default, Manager connects to the local server when it starts. To start without a server, set Auto-connect to local server to No in Manager Settings.

Open a Storage Archive File

Each archive file is a zip with a copy of the storage index and the message files for its hour or day.

  1. Copy the zip file to a local disk.

  2. Extract it to an empty folder.

  3. Open the folder as described in Open a Storage Folder.

To view several archive files together, extract them into the same folder from oldest to newest, replacing existing files. Each archive file holds a copy of the storage index from its sync, and only the newest copy covers all extracted hours.

Read-Only Storage

Manager opens the storage for viewing only when:

  • ► it cannot write to the folder, or

  • ► the folder holds a version 6 storage (storage.index).

Manager then shows Syslog storage is open for viewing only (read-only).

To edit a version 7 storage, restart Manager as Administrator, and make sure the storage files are not marked read-only. A version 6 storage always opens read-only.

Time Zone

Without a server, calendar days on the Storage tab and the RECEIVED field use the time zone of the Manager computer, not the time zone recorded in the storage. The Storage tab status bar shows it. Exception: for a version 6 storage, RECEIVED uses the time zone saved in that storage, if it has one. See Time Zone.

Close the Storage

In the Storage section of the main toolbar, click Storage Storage → Close Storage and confirm. The Server section appears again.

Related Topics