How to run dtrace using triggers with Enterprise Vault (EV)

  • Modified Date:
  • Article ID:000031937


How to run dtrace using triggers with Enterprise Vault (EV)


When troubleshooting intermittent issues, it is necessary to set up DTRACE to begin capturing only if certain criteria are met. The use of trigger words will help to reduce the size of the DTRACE log because only relevant content will be captured.

To setup DTRACE,  review the technical article TECH38122 in the Related Articles section below.
The following screen capture shows a simple trigger of "restarting failed process" (Figure 1). The actual search terms will vary depending on the problem being researched.

Figure 1

After enabling dtrace on the desired process, the following parameters should be set to enable a trigger on the words "restarting failed process":


Manage watch entry trigger.     (? for help)

DT Trigger>include "restarting failed process"
'restarting failed process' - added to filter include strings

DT Trigger>q


Watch Trace Output

Maximum number of snapshots [3[ > *enter # of times to capture*
Log file [DTraceWatch.log] > *enter logfile name if desired*
Number of trace entries to display after trigger entry [20] >*set # of lines*
Apply display filter? [Yes/No] (Yes)>

Watching is enabled to 'C:\Program Files\Enterprise Vault\DTraceWatch.log'     (Use 'watch' to disable)


Terms of use for this information are found in Legal Notices.



Did this article answer your question or resolve your issue?


Did this article save you the trouble of contacting technical support?


How can we make this article more helpful?

Email Address (Optional)