Monitor and Alert on DNS scavenging

I have scavenging setup on 1 of my Microsoft DNS servers which is OS 2019. with that stated when scavenging runs it creates a 2501 event under DNS event logs. How can I setup monitoring of this event ID on a server to alert say in a Month if it is generating this alert and if it isn't to create an alert for me please?

Find more posts tagged with

monitor_event_log

alert set up

Accepted answers

All comments

yaquaholic

Hi chrodriguez,

Firstly you'll need to set up a new SAM monitor and add the "Windows Event Log Monitor" to it.
Then configure this to use the <inherited from node> credentials, "DNS Log" and "Custom" Match Definition.
Then you can match by event ID 2501. Then set up the rest of the monitor how you'd like it, but I'd leave any thresholds off for the time being.
Now apply this monitor to the server in question.

Once you are monitoring the specific DNS events, then you can then look at the alert logic.

Docs are here - documentation.solarwinds.com/.../sam-windows-event-log-monitor-sw3329.htm

chrodriguez

I do believe i have this set already, what's weird is it never fired for this event 2501 in over a month of which we have scavenging to run every 14 days. So I should've at least got an alert that 2501 event ID never fired or at least that is the Goal.