Solarwinds SAM - Windows Event Log entries (Event ID 1069 and 1658)

Hi Guys!! We are looking to monitor the following Windows Event Log entries (Event ID 1069 and 1658) using Solarwinds SAM. Can you share your template or how to set up this monitoring in SAM?

The presence of these Windows Event Log entries indicates Quorum loss for the Microsoft Windows Cluster

Find more posts tagged with

sam

network_monitoring

Windows

Accepted answers

All comments

mesverrum

You'd be looking to create a SAM template with a couple Windows Event Log Monitors in them, the docs for that are here documentation.solarwinds.com/.../sam-windows-event-log-monitor-sw3329.htm

itengineer

Thanks @mesverrum for sharing.

Does that method you've shared will consume an additional AL license per Event or node usage?

mesverrum

Depends on how old your license is. On the legacy component based SAM licenses each component counts against your total, but on the newer licenses sold over the last several years it is one license per monitored server. For those it does not matter how many components you collect or how many templates you use.