Viewing and Filtering Events

The Events page lets you display events and alerts that have occurred within a time range you select anywhere in your clusters. From the Events page you can filter for events for services or role instances, hosts, users, commands, and much more. You can also search against the content information returned by the event.

To view events, select Diagnose > Events.

Events List

Event entries are ordered (within the time range you've selected) with the most recent at the top. If the event generated an alert, that is indicated by a red alert icon () in the entry.

This page supports infinite scrolling: you can scroll to the end of the displayed results and the page will fetch more results and add them to the end of the list automatically.

To display event details, click the arrow () at the right side of the event entry.

To view a log event's log entry at the time the event occurred, do one of the following:
  • Click the View link.
  • Click the arrow at the right side of the event entry () to display details of the entry, then click the URL link.
  Note: When you perform one of these actions, a new tab is opened containing the log entry and the time range in the Time Line is shifted to the time the event occurred.

Filtering Events

You filter events by selecting a time range and adding filters.

You can use the Time Range Selector or a duration link () to set the time range for your search. (See Time Line for details). Note that the time it takes to perform a search will typically increase for a longer time range, as the number of events to be searched will be larger.

Adding Filters

  • Click the icon that displays next to a property when you hover in one of the event entries. A filter containing the property and its value is added to the list of filters at the left and Cloudera Manager redisplays all events that match the filter.
  • Click the Add Filter to the left of the log. A filter control is added to the list of filters.
    1. Choose an event property in the property drop-down list. You can search by properties such as Username, Service, Command, or Role. The actual properties may vary depending on the service or role you are looking at.
    2. If the property allows it, choose an operator in the operator drop-down list.
    3. Type a property value in the value text field. Note that for some properties, where the list of values is finite and known, you can start typing and then select from a list of potential matches. For some properties you can include multiple values in the value field. For example, you can create a filter like "SERVICE = HBASE1, HDFS1".
    4. Click Add Another to add additional filter components. A filter containing the property and its value is added to the list of filters at the left. Multiple filters are combined using AND – for example, SERVICE = HBASE1 AND USERNAME = admin)
    5. Click Search. The log displays all events that match the filter criteria.
  Note: You can filter on a string by adding a filter, selecting the property CONTENT, and typing the string to search for.

Removing a Filter

  1. Click the at the right of the filter. The filter is removed and the audit log redisplays all events that match the remaining filters.

Modifying a Filter

  1. Click the filter. The filter expands into separate property, operator, and value fields.
  2. Modify the value of one or more fields.
  3. Click Search. A filter containing the property, operation, and value is added to the list of filters at the left and the audit log redisplays all events that match the modified set of filters.