Monitor for good event id

[oryagel]

Hi,

There is an event ID which occurs once every night.

The event says that a backup was completed successfully.

I want to monitor this event.
The rule should be:
"If event id X didn't appear in the last 24 H -> Alert"

How can I do it?

Thanks

[KS-Soft Europe]

1. Setup "Bad" filter for your log event: event ID, computer, Event type, Description ("Bad Event must satisfy the following requirements" section),
also "set "Ok" status when no new "Bad" events detected" and
"Report about last "Bad"/"Good" event" options should be selected.

2. Then simply use Reverse alert option on Test properties dialog.

3. NT Event Test should be setup with irregular schedule and start after backup completion.
E.g. if backup ends at 22:00, test should be scheduled to start once a day at 22:30

Please check the manual or visit our web site for more information at:
reverse alert option: http://www.ks-soft.net/hostmon.eng/mfra ... tm#Reverse
NT Event Log test: http://www.ks-soft.net/hostmon.eng/mfra ... m#chkNTLog
Irregular schedule: http://www.ks-soft.net/hostmon.eng/mfra ... m#Schedule