NT event Log

DJMoore · Joined: 26 Sep 2002 Posts: 11

I would like to monitor and alert for event ID number 6006 on W2k server via system event
log. I see Event ID mentioned in documention but it's not very clear how to set this up. Is this possible?

Any help appreciated! Thanks, Don

KS-Soft · Joined: 03 Apr 2002 Posts: 12801 Location: USA

Yes, its possible. Use "NT Event Log" test. There is information how to setup this test http://www.ks-soft.net/hostmon.eng/mframe.htm#tests.htm#chkNTLog

Regards
Alex

DJMoore · Joined: 26 Sep 2002 Posts: 11

Yes, I found the event ID reference in your documentation, but I do not find actual location to place Event ID.. Perhaps an example is in order... Thanks!

KS-Soft · Joined: 03 Apr 2002 Posts: 12801 Location: USA

Ok: Main menu -> Test -> New -> NT Events Log test. You will see Test Properties dialog. To setup Event ID click on "Alert condition", and click button on the right from Event ID field.

Regards
Alex

Bonj87 · Joined: 29 Jan 2003 Posts: 13

Im trying to find a way for host monitor to find event id 528 and log exactly what the event ID says in the event log.
I setup the filter. I set it up as an alert condition.
It either takes a long long time to run, andor it just comes back with "ok".
How can we expand what it reports to us?

KS-Soft · Joined: 03 Apr 2002 Posts: 12801 Location: USA

Do you mean you want to see Event Description? Enable "Show events description in the Reply field" option, located on Miscellaneous page in the Options dialog.

Regards
Alex

Bonj87 · Joined: 29 Jan 2003 Posts: 13

Its set already, but all i get back in my html report is "ok"

KS-Soft · Joined: 03 Apr 2002 Posts: 12801 Location: USA

"Ok" means HostMonitor did not find any new event with specified ID. HostMonitor will set "Bad" status and start alert actions when NEW "bad" event detected.

Regards
Alex