Strategy for analyzing the log files
Different log files provide different information about possible failures. Knowing what was happening at the time of the failure can help you choose which log file to examine. For example, if the failure occurred before the system starts then check the EMC log directory.
In general, if the failure occurs during a run, begin by looking at the TSM/System log, which is used to monitor the behavior of the entire system. The TSM/System log may provide information that the UI cannot. For example, the UI may not be able to identify which server or cluster unit failed.
What to look for in the TSM log
If the TSM log is missing or shows an incorrect timestamp
About Detect log files
Performance information in the TSM log