Logtool Reference: All the files

This Web page contains all the files that make up the Logtool Reference.

You can print it out from your browser to get a hardcopy version of the entire Logtool Reference.

Logtool Reference: Summary

The Logtool Utility in the Support Tool Manager (STM) allows you to monitor recoverable errors detected by the computer, such as single-bit memory errors, and I/O device errors. By analyzing this information, you can troubleshoot failures before they become acute.

Error information is contained in system log files. Since the raw files are hard to read, Logtool allows you to format the files and to filter them for desired entries (for example, for all entries related to SCSI disks).

Unlike other support tools, this utility program is not device specific and does not require selection of a device to run.

The following topics provide a full set of reference materials for Logtool:

Procedures	Step-by-step procedures for running logtool, viewing a log, and troubleshooting disk and memory problems. (xstm, mstm or cstm).
Commmands	Command reference: a complete description of each of the logtool commands. (Commands are given in their xstm format, but descriptions apply to the equivalent mstm and cstm commands as well.)
mstm commands	List of logtool commands and menus for mstm.
cstm commands	List of logtool commands for cstm.
Troubleshoot	Troubleshooting tool-related problems.
Background	Background theory for logtool: the logging daemon, logging, logging control, logtool and the logging process, raw log files, formatting the data, filtering the data, the memory log, log entry types.

Logtool Reference: Step-by-Step procedures

• Running the Logtool Utility
• Viewing a Log
• Troubleshooting Disk Problems
• Troubleshooting Memory Problems

Running the Logtool Utility. To run the Logtool Utility:

1. If desired, change the options for the Logtool Utility at the main STM window. Options include the level of logging for the tool. For example, you might want Logtool to put error and warning messages into its Test Activity Log if it encounters problems during its operation. For more information, see online help for STM as a whole (use the Help menu in the STM main window).
2. Run the Logtool Utility. (Tools->Utility->Run->logtool)
3. To select the desired commands, use the pull-down menus in Logtool's main window. For more information, see:
   • Viewing a Log
   • Troubleshooting Disk Problems
   • Troubleshooting Memory Problems
   • Commands and Buttons
4. Information is displayed in the main window of Logtool or in pop-up windows.
5. If you run into problems, see the Troubleshooting Tool help topic.
6. Exit Logtool by selecting the Exit command from the File Menu.

Viewing a Log. Logtool offers many different ways to select log entries and view them. A typical method for viewing logs involves these steps:

1. Select a raw (unformatted) log file (Select Raw command in the File Menu). The current log file ends in ".cur", e.g., "log1.raw.cur". You do not have to switch logs in order to view the current log file. Once the file has been selected, the summary will be displayed automatically.
2. If the raw log summary indicates some entries relevant to your problem:
   1. Set up a format filter to select the types of entries you wish to see (Format command in the Filters Menu). To see all entries, skip this step.
   2. Format the raw log file (Format Raw command from the File Menu).
   3. Display the formatted log file (Formatted Log command in the View Menu).
3. If desired, you can further narrow the types of entries that are displayed:
   1. Set the formatted display filter to the appropriate values (Formatted command in the Filters->Display Menu.)

For example, you may have used a format filter that resulted in all entries from the SCSI disk driver being formatted. After viewing a summary of the formatted entries, you may decide that only entries for a particular device are of interest or, perhaps, only entries after a certain date and time. You could then set the formatted display filter to specify a specific device path or date and time and re-display the formatted log.

Troubleshooting Disk Problems. To troubleshoot a disk problem (sample procedure):

Follow the general procedure described in Viewing a Log, but specify disk-related parameters in any of the filters commands.

For example, activate the "Filter I/O Errors" radio button under the title "I/O Error Entries" and de-activate all the other checkboxes, such as the checkbox for "LVM Entries." Under "Products:", select only the relevant products (for example select "SCSI Disk" and not "LAN Interface").

Troubleshooting Memory Problems. To troubleshoot a suspected problem with memory (sample procedure):

The method for viewing the memory error log file involves these steps:

1. Select the Report Log command from the Memory Menu
2. To see the entire error log select the View Detail command in the Report Log Menu.
3. To see errors regarding deallocated pages only, select the ViewDealloc command in the Report Log Menu.

If most of the errors in the file indicate the same slot for the memory controller, then the SIMM module in that particular slot is probably bad.

If occasional errors report the same slot for the memory controller, then the SIMM module in that particular slot is suspect.

If the same bit number is indicated across many slots then the memory controller is bad.

Logtool Reference: Command reference

The Logtool Utility offers the following commands and buttons.

(Commands are given in their xstm format, but the descriptions hold true for the equivalent commands in mstm and cstm.)

• File Menu
  • Select Raw
  • Format Raw
  • Select Formatted
  • Switch Log
  • Save As
  • Print
  • Exit
• View Menu
  • Raw Summary
  • Raw Log
  • Formatted Summary
  • Formatted Log
• Filters Menu
  • Format
  • Display
    • Raw
    • Formatted
• Memory Menu
  • Clear Log
  • Set Timer
  • Report Log
    • View Dealloc
    • View Detail
• Chassis Menu
  • View Boot Log
  • View Error Log
• Help Menu
  • General Help
  • Version
• Buttons (xstm only)
  • Abort Button
  • Interrupt Button

---

Select Raw. The Select Raw command displays the names of the raw log files in the default log directory and allows you to select one or more for viewing, filtering or formatting. If multiple files are selected, all of the entries are combined together and treated as one file. Once the file(s) is selected, the summary information is automatically displayed.

The current raw log file has the extension ".cur" and is the default selected file. Each time a new log file is generated, its file name is incremented by one. For example, the initial file will be "log1.raw.cur". When a new file is generated, "log1.raw.cur" will become log1.raw, and the current raw log file will be "log2.raw.cur".

If the current raw log file is selected, the output of subsequent commands such as Raw Log or Format Raw may reflect additional records/and or counts that weren't displayed initially. This is because more errors may have been logged to the currently active file since it was last read.

NOTE: Users can optionally specify a file of their own choosing but are cautioned that only log files generated on the host system should be formatted on that system. Attempts to format log files from other systems may result in formatting problems or incorrect formatted output. Once a formatted log is generated, it can be moved to other systems and displayed without any problems.

---

Format Raw. The Format Raw command formats entries from the currently selected raw log file or files chosen via the Select Raw command under the File menu. If a file has not been selected, the current raw log file, if there is one, is used as the default. Formatting makes the log entries much easier for humans to understand.

NOTE: You should format log files on the same system as they were generated, or on a system with the same release level as the system that generated the logs. Formatting log files on systems with other release levels may result in incomplete decoding of data. Once a formatted log is generated, it can be moved to other systems and displayed without any problems.

The entries in the raw log can be filtered according to the Format filter settings (Format command). Entries which do not match the filter are not formatted. If you wish to format entries which were previously filtered out, change the filter and reformat the log. If no filters have been selected, all entries will be formatted.

The data portion of each entry is formatted into text by the appropriate log decoding routine. If an appropriate log decoding program cannot be located for a particular entry, the data portion of the entry is displayed in hex.

Formatted log file names have the form "logN.fmtN" where the first number (N) matches that of the raw log file from which it was generated and the second number (N) starts at 1 and is incremented for each new formatted file that is generated from the same raw log file. For example, "log1.raw" becomes "log1.fmt1" the first time it is formatted. If you then format the same raw log a second time; the newly formatted file is named "log1.fmt2." This happens whether or not different filtering criteria were used.

After a raw file is formatted, the formatted file becomes the selected formatted file to be displayed or summarized by the Formatted Summary and Formatted Log commands under the View menu.

---

Select Formatted. The Select Formatted command displays the names of the formatted log files that are currently in the default log directory on the system and allows you to select one or more for viewing or filtering. Once the file(s) is selected, the summary information is automatically displayed.

---

Switch Log. The Switch Log command moves the existing current raw log file "logN.raw.cur" to "logN.raw." The next time the logger process needs to write an error it opens a new "logN.raw.cur" file, incrementing the "N" by one.

For example, the Switch Log command moves "log5.raw.cur" to "log5.raw," causing the logger process to open a new raw log file called "log6.raw.cur" the next time there is an error to be logged.

Individual log files can be kept from becoming too large by issuing this command occasionally. Alternatively, a size threshold can be set in the diaglogd.cfg file.

---

Save As. Use the Save As command to save the contents of Logtool's main window. (Only the most recent 200 lines can be saved.)

---

Print. Use the Print command to print the contents of Logtool's main window. (Only the most recent 200 lines can be printed.)

---

Exit. Use the Exit command to leave the Logtool Utility and return to the main STM window.

---

Raw Summary. The Raw Summary command from the View menu can be selected independently but is also run automatically when file(s) are selected. It displays a summary of the entries in the currently selected raw log file(s). If no files were selected, the current raw log file, if there is one, is used as the default. The summary reports the total number of each type of error entry that occurs in the file(s); for example, "Number of LPMC entries: 6." If multiple files are selected, the data is summarized together as if they are one file.

The summary reports additional information on I/O error entries, listing the specific device paths, products, product qualifiers, and logger events that occur in the file, and the number of times they occur.

For more information, see Log Entry Types.

---

Raw Log. The Raw Log command from the View menu displays the entries from the currently selected raw log file(s). The header portion is displayed in text and the data portion is displayed in hex.

The raw log file(s) could have been selected via the Select Raw command from the File menu. If a raw log file was not selected, then the current raw log file, if there is one, is used as the default. Filters may have been selected and applied via the Raw command under the Filters->Display Menu. Entries which do not match the filter are not be displayed. If you wish to display entries which were previously filtered out, change the filter and redisplay the log using the Raw command in the Filters->Display Menu. If multiple files are selected the data is presented as if they are one file.

The top of the display in the "Display Filters: area" lists the filter criteria specified at the time the raw log was filtered.

---

Formatted Summary. The Formatted Summary command from the View menu displays a summary of the currently selected formatted log file(s). It can be selected independently but is also run automatically when file(s) are selected. If no files were selected via the Select Formatted command under the File menu, then the current raw log file, if there is one, is automatically formatted and becomes the selected formatted file. If multiple files have been selected the entries are combined together and treated as one file.

The summary reports the number of each type of error entry that occurs in the file(s) (for example, "Number of LPMC entries: 6").

The summary reports additional information on I/O error entries, listing the specific device paths, products, product qualifiers, loggers, device types and device qualifiers that occur in the file, and the number of times they occur.

For more information, see Log Entry Types

---

Formatted Log. The Formatted Log command from the View menu displays the formatted log data that was generated by the Format Raw command under the File menu.

The formatted log file(s) could have been selected via the Select Formatted command from the File Menu. If a file was not selected, the current raw log file, if there is one, is automatically formatted and becomes the selected formatted file. Filters may have been selected and applied via the Formatted command under the Filters->Display Menu.

Entries which do not match the filter are not displayed. If you wish to display entries which were previously filtered out, change the filter and redisplay the log.

The top of the display in the "Display Filters: area" lists the filter criteria specified at the time the raw log was filtered.

---

Format. The Format command from the Filters menu allows you to select filtering criteria to be applied to the entries in the raw log file before formatting.

In order to set the filter, you must have first selected a raw log file(s) via the Select Raw command under the File menu. If a file was not selected, then the current raw log file, if there is one, is used as the default.

Items which occur in the raw log are displayed as candidates for filtering. These items are displayed in a dialog screen and you can select as many items as desired.

To select more than one item in a box, hold down the control key (CTRL) and click on the item with the left mouse button.

Once one or more items have been selected, subsequent Format Raw commands (under the File menu) only format entries which match the filter criteria. An entry is considered to be a match for a particular filter field if it matches any of the selected items that were set in that field. If a field has no items selected, any entry matches that field. In order for an entry to pass through the filter, it must match the criteria for all of the filter fields.

For example, if you select a Device Type of "Disk" and a Device Qualifier of "Hard," only entries for Hard disks are formatted/displayed. If you select a Device Path of "1/0/0" and a Device Type of "Disk," no entries are formatted/displayed unless a disk drive is associated with that path.

The lines labeled "All entry types" and "Select entry types from choices below" are controlled by radio buttons. Select "All entry types" to see all of the entries. The selection "Select entry types from choices below" allows you to make choices from the checkboxes below it.

If there is only one entry in a box, it appears as highlighted, and therefore selected. To clear all selected items you can press the Defaults button. To clear a specific highlighted item, hold down the control key (CTRL) and click on the item with the left mouse button

To select more than one item in a box, hold down the control key (CTRL) and click on the item with the left mouse button.

The starting and ending date/time fields initially contain the date/time of the first and last log entry.

Pressing the Defaults button unselects all items and selects the default of "All entry types".

---

Raw. The Raw command from the Filters->Display menu is used to select which entries in the raw log file to display.

In order to set the filter, you must have first selected a raw log file via the Select Raw command under the File menu. Otherwise, the current raw log file, if there is one, is used as the default. Items which occur in the raw log are displayed as candidates for filtering. These items are displayed in a dialog screen and you can select as many items as desired.

To select more than one item in a box,

hold down the control key (CTRL) and click on the item with the left mouse button.

Once one or more items have been selected, subsequent Raw Log commands (under the View menu) only display entries which match the filter criteria. An entry is considered to be a match for a particular filter field if it matches any of the selected items that were set in that field. If a field has no items selected, any entry matches that field. In order for an entry to pass through the filter, it must match the criteria for all of the filter fields.

For example, if you select a Device Type of "Disk" and a Device Qualifier of "Hard," only entries for Hard disks are formatted/displayed. If you select a Device Path of "1/0/0" and a Device Type of "Disk," no entries are formatted/displayed unless a disk drive is associated with that path.

The lines labeled "All entry types" and "Select entry types from choices below" are controlled by radio buttons. Select "All entry types" to see all of the entries. The selection "Select entry types from choices below" allows you to make choices from the checkboxes below it.

If there is only one entry in a box, it appears as highlighted, and therefore selected. To clear all selected items you can press the Defaults button. To clear a specific highlighted item, press the control key (CTRL) on the keyboard and the left mouse button simultaneously.

To select more than one item in a box, hold down the control key (CTRL) and click on the item with the left mouse button.

The starting and ending date/time fields initially contain the date/time of the first and last log entry.

In addition to specifying criteria for each of the header fields, you can enter a hex pattern to search for in the data for each entry. If a search pattern is specified, it is applied in addition to any other fields already specified.

NOTE: Specifying a search pattern may result in a noticeable delay because each entry's data must be searched. When a search pattern is not used, only header contents are examined. Pressing the Defaults button unselects all items and selects the default of "All entry types".

---

Formatted. The Formatted command from the Filters->Display menu is used to select which entries in the formatted log file to display.

In order to set the filter, you must first select one or more formatted log file(s) via the Select Formatted command under the File menu. If a file was not selected in this way, then the current raw log file, if there is one, is automatically formatted and becomes the selected formatted file.

Items which occur in the log are displayed as candidates for filtering. These items are displayed in a dialog screen and you can select as many items as desired.

To select more than one item in a box, hold down the control key (CTRL) and click on the item with the left mouse button.

Once one or more items have been selected, subsequent Formatted Log commands (under the View menu) only display entries which match the filter criteria. An entry is considered to be a match for a particular filter field if it matches any of the selected items that were set in that field. If a field has no items selected, any entry matches that field. In order for an entry to pass through the filter, it must match the criteria for all of the filter fields.

For example, if you select a Device Type of "Disk" and a Device Qualifier of "Hard," only entries for Hard disks are formatted/displayed. If you select a Device Path of "1/0/0" and a Device Type of "Disk," no entries are formatted/displayed unless a disk drive is associated with that path.

The lines labeled "All entry types" and "Select entry types from choices below" are controlled by radio buttons. Select "All entry types" to see all of the entries. The selection "Select entry types from choices below" allows you to make choices from the checkboxes below it.

If there is only one entry in a box, it appears as highlighted, and therefore selected. To clear all selected items, press the Defaults button. To clear a specific highlighted item, press the control key (CTRL) on the keyboard and the left mouse button simultaneously.

To select more than one item in a box, hold down the control key (CTRL) and click on the item with the left mouse button.

The starting and ending date/time fields initially contain the date/time of the first and last log entry.

Pressing the Defaults button unselects all items and selects the default of "All entry types".

---

Clear Log. The Clear Log command will notify the memory logging daemon to create a new memory log file. Since this command DELETES the existing memory log file, you may want to view it first:

xstm: Memory | Report Log | View Detail
mstm: Memory | Report Log | View Detail
cstm: vd (viewdetail)

If desired, use an HP-UX command to save the memory log file (/var/stm/logs/os/memlog) to a different name.

---

Set Timer. The Set Timer command allows you to change the interval at which the memory logging daemon polls the memory for errors.

---

View Dealloc. The View Dealloc command allows you to display the deallocated page information from the memory log file.

---

View Detail. The View Detail command allows you to display the entire contents of the memory log file.

---

Chassis View Boot Log.

The Chassis View Boot Log command allows you to display the contents of the chassis code boot log file (ccbootlog).

The boot log contains mostly informational log entries output by the system as it boots. If the system is experiencing problems booting, this log may contain useful information about the problem.

The boot log is created by the logging daemon (diaglogd). Log entries can come from various system hardware, software and firmware modules.

Chassis logging was implemented beginning with the introduction of N-class systems on HP-UX 11.00, and will be featured on some newer systems as they are released.

---

Chassis View Error Log.

The Chassis View Error Log command allows you to display the contents of the chassis code error log file (ccerrlog).

The chassis code error log contains entries for chassis codes reported with an alert level indicating that an error has occurred.

For instance, chassis codes are logged if problems occur with the power supplies. By examining the error log, you could see a record of these power supply problems.

The error log is created by the logging daemon (diaglogd). Log entries can come from various system hardware, software and firmware modules.

Chassis logging was implemented beginning with the introduction of N-class systems on HP-UX 11.00, and will be featured on some newer systems as they are released.

---

General Help. The General Help command displays online help for the Logtool Utility (the help system currently being viewed).

For information on using the help system, select the "Using Help..." command in the Help menu in this Help window.

For online help on STM as a whole, use the Help menu in the STM main window.

---

Version. The Version command displays version and copyright information for the Logtool Utility.

---

Abort Button (xstm only). The Abort button allows you to abort the Logtool Utility, halting its execution and returning to the STM main window.

---

Interrupt Button (xstm only). The Interrupt button allows you to interrupt the tool.

When the tool receives the interrupt, it stops whatever it is doing and prompts you to respond if you want to continue with the operation. If the reply is "Continue", the tool resumes what it was doing at the time of the interrupt. If the reply is "Abort", it terminates the operation and returns to the Logtool Utility main window.

The tool may not immediately receive the interrupt as it could be in the middle of an operation that should not or could not be interrupted. The interrupt is received as soon as the tool completes the operation.

The tool will receive and ignore user interrupts when it is already in the process of returning to the main window of the tool.

Logtool Reference: mstm commands

This page lists the logtool commands as they appear in the pull-down menus in mstm. For descriptions of the commands see the Logtool Commmand Reference.

NOTE: Starting with version A.08.00 of STM; mstm no longer uses Function Keys. Mstm now uses Pull-Down Menus, similar to the menus in xstm.

                Summary of Logtool Menu Commands

                --- File Pulldown Menu Keys ---

Select Raw        - Select a raw log file or files to view, filter
                    or format
Format Raw        - Format the currently selected raw log file(s)
Select Formatted  - Select a formatted log file or files to view 
                    or filter
Switch Log        - Switch to (create) a new "current" raw log file
Save As           - Save Logtool's main window
Print             - Print Logtool's  main window
Exit              - Exit Logtool and return to the main STM screen 

                --- View Pulldown Menu Keys ---

Raw Summary       - View the summary of the currently selected
                    raw log file(s)
Raw Log           - View the currently selected raw log file
Formatted Summary - View the summary of the currently selected 
                    formatted log file(s)
Formatted Log     - View the currently selected formatted log 
                    file(s)

                --- Filters Pulldown Menu Keys ---

Format            - Select format filters for the currently 
                    selected raw log file(s)
Display Menu Keys
   Raw            - Select display filters for the currently 
                    selected raw log file(s)
   Formatted      - Select display filters for the currently
                    selected formatted log file(s)

                --- Memory Pulldown Menu Keys ---
 
Clear Log         - Clear the memory log file
Set Timer         - Change the polling interval for logging 
                    memory errors 
Report Log Menu Keys
   View Dealloc   - View errors pertaining to deallocated 
                    memory errors
   View Detail    - View the entire memory log file

                --- Chassis Pulldown Menu Keys ---

Chas Bootlog      - View the chassis code boot log file
Chas Errorlog     - View the chassis code error log file

                --- Help Menu Keys ---

General help      - Display online help for Logtool 
Version           - Display Logtool version and copyright 
                    information

Control-C         - Interrupt or abort execution of logtool; 
                    escape to the user interface

Logtool Reference: cstm commands

This page lists the logtool commands as they appear in their command-line forms in cstm. For descriptions of the commands see the Logtool Commmand Reference.

                      File Commands

SelectRaw (SR) - Select a raw log file to view, filter or format
FormatRaw (FR) - Format the currently selected raw log file
SelectFormatted (SF) - Select a formatted log file to view or 
                       filter
SwitchLog (SL) - Create a new "current" raw log file
Save (SAV) - Save Logtools' main window
Print (PRN) - Print Logtool's  main window
Exit (EX) - Exit Logtool and return to the STM prompt

                      View Commands

RawSummary (RS) - View the summary of the currently selected 
                  raw log file
RawLog (RL) - View the currently selected raw log file
FormattedSummary (FS) - View the summary of the currently 
                        selected formatted log file
FormattedLog (FL) - View the currently selected formatted 
                    log file

                   Filters Commands

Format (FF) - Select format filters for the currently selected 
              raw log file
DisplayRaw (DR) - Select display filters for the currently 
                  selected raw log file
DisplayFormatted (DF) - Display the currently selected formatted 
                        log file

                      Memory Commands

ClearLog (CL) - Clear the memory log file
SetTimer (ST) - Change the polling interval for logging 
                memory errors
ViewDealloc (VDA) - View errors pertaining to deallocated 
                    memory errors
ViewDetail (VD) - View the entire memory log file

                     Chassis Commands

View Boot Log (CB) - View the Chassis Code Boot Log file
View Error Log (CE) - View the Chassis Code Error Log file

                      Help Commands

Help (HE) - Display online help for Logtool
Version (VERS) - Display Logtool version and copyright 
                 information

Control-C - Interrupt the tool.

Logtool Reference: Troubleshooting tool-related problems

• A failure or other problem with the Logtool Utility:
  Consult the tool's Activity Log, accessible from the STM main window.

• You select a Logtool Utility command but nothing seems to happen:
  The Logtool Utility may be waiting for a response to a query message it is displaying. Look underneath the windows displayed on the monitor for a query message. Also, de-iconize any windows related to stm or the tool.

• When you view a system log, the entries are hard to understand.
  Entries in the raw system log are hard to understand; format the log to make the entries more readable (Format Raw command in the File Menu).

• When you view a system log, you find it hard to analyze the problem because too many irrelevant entries are displayed. Specify that only certain entries in the log be formatted or displayed; use one of the commands in the Filters Menu.

• The current system log ("logN.raw.cur") is getting too large. Start a new current system log (Switch Log command in the File Menu).

• Problems occur when formatting a log file that originated on a different computer system.
  At present, Logtool only supports the formatting of log files that originated on the host system. Format the log files on the computer on which they were generated. Once a log has been formatted, it can be moved to other computers for display and filtering.

Logtool Reference: Background theory

The Logging Daemon. When STM is installed on a computer, a logging daemon is activated to monitor recoverable errors that have been detected by the system, for example:

• I/O errors (detected by drivers)
• Low Priority Machine Checks (LPMCs)
• System overtemps
• Logical Volume Manager (LVM) errors
• Logger events

For more information, see Log Entry Types.

Logging. When the logging daemon detects an event, it logs an entry in a system log file located (by default) in the directory "/var/stm/logs/os". The raw log file names have the format "logN.raw," where N is a number that starts at 1 and is incremented each time a new log file is created with the command Switch Log. The only exception to the raw log file naming convention is the log file to which the logging daemon is currently logging data; this file is called "logN.raw.cur."

Memory errors, when detected by the memory logging daemon, are logged into the memory log file called memlog.

Logging Control. To change the file to which the daemon is logging data, select the Switch Log command from the File Menu. A new current raw log file will be generated when an error is logged.

You can modify the behavior of the logging daemon by editing the configuration file "diaglogd.cfg" located in the directory "/var/stm/config/sys". The file itself contains documentation regarding its format.

Logtool and the Logging Process. The role of Logtool in the logging process is shown in the diagram and is explained in more detail below.

Raw Log Files. The first step in analyzing the logs is usually to enter the Select Raw command from the File Menu. A summary of the contents of a log will automatically be displayed. In addition the summary information can be obtained with the Raw Summary command in the View Menu. To view the entries in the log file, you use the Raw Log command in the View Menu.

Looking at all the entries in the raw log file can be burdensome:

• The entries in the raw log file are difficult to read.
• A log file can contain an overwhelming amount of data.

To solve these dilemmas, Logtool offers the ability to format and filter the entries in the logs.

Formatting the Data. To translate the raw log file into a more readable format, select the Format Raw command from the File Menu. The formatted data is put into a file with the name "logN.fmtN" where the first number (N) matches that of the raw log file and the second number (N) starts at 1 and is incremented for each new formatted file generated from the same raw log file. If multiple files have been chosen, the file name will have a plus sign("+") in it. For example, log1.raw and log2.raw will be formatted into log1+.fmt1.

To choose a particular formatted file for viewing or filtering, use the Select Formatted command from the File Menu. A summary of the contents of the formatted log can will automatically be displayed. To view the entries in the formatted log file, you use the Formatted Log command in the View Menu.

Filtering the Data. Even if the data is formatted, there is generally a large number of entries contained in a typical log. When you are troubleshooting a problem, only certain entries may be relevant. For example, you may want to see only I/O errors that occurred during a certain time period on a certain hardware path.

Logtool offers three different filters to select the entries relevant to your task.

• To filter entries before the formatting of a raw log file, select the Format command in the Filters Menu.
• To filter entries before the viewing of a raw log file, select the Raw command in the Filters->Display Menu.
• To filter entries before the viewing of a formatted file, select the Formatted command in the Filters->Display Menu.

Memory Log. The memory log is handled somewhat differently than the system logs described above. The commands to view the memory report log or to clear the memory log are found in the Memory Menu. You can also use the Memory->Set Timer command to change the memory polling interval.

The memory report log can be viewed in two separate ways. The entire log file can be viewed (View Detail) or information pertaining only to memory deallocation can be viewed (View Dealloc).

Chassis Logs. The chassis code logging daemon logs information to the chassis code error log file and boot log files called ccbootlog and ccerrlog respectively. These log records are generated by various system hardware, software and firmware modules. They can contain error indications as well as informational messages. Chassis code logging was implemented beginning with the introduction of N-class systems on HP-UX 11.00, and will be featured on some newer systems as they are released.

Log Entry Types. The entry types currently logged by Logtool include:

• I/O Error Entry.
  Logged by I/O system drivers, I/O error entries typically contain information concerning exception conditions that the driver encountered.
  • Entries in the raw log file have four components:
    • Device Path: the hardware address of the device. For example, "2/0/1.1.0".
    • Product: The type of device. For example, "SCSI Interface," "LAN Interface," "SCSI Disk."
    • Product Qualifier: Additional information about the device. For example "HPC2490AM."
    • Logger: The logging entity (usually a software device driver). For example: "lanmux0," "disc30," "scsi1."
  • Entries in the formatted log file have two additional components:
    • Device Type: The general type of device. For example, "Interface," or "Disk."
    • Device Qualifier: Additional information about the device type. For example: "LAN," "SCSI," "Hard."
• Low Priority Machine Check (LPMC) Entry
  Logged by the system when a Low Priority Machine Check (LPMC) condition has occurred. An LPMC is a recoverable error detected by hardware; the hardware is able to recover from the error and continue operation, though perhaps in a degraded fashion. In contrast, a High Priority Machine Check is an error detected by hardware from which it cannot recover.
• System Overtemp Entry
  Logged by the system when hardware detects a recoverable over-temperature condition (over-temp warning).
• Logical Volume Manager (LVM) Entry
  Logged by the Logical Volume Manager, typically containing information concerning exception conditions the manager encountered.
• Logger Entry
  Logged by the logger process. The type of events that are logged include suspension and resumption of logging.