Windows server event logs report

wazzup360

I'd like to be able to generate a daily report that would show any windows server errors found in the event logs that have happened three times or more within the last 24 hours.

Is this something that can be done with Kiwi Syslog and/or Orion Syslog?

 

Thanks

christineb

Hi Wazzup360 - you can do this with Syslog, but it's going to take a little doing. 

You'd need:

1.      Solarwinds Log Forwarder for Windows (with a subscription set-up for the System event log, forwarding events to KSS).

2.      Kiwi Syslog, with two custom RunScript actions configured.

                               I.           One that would add “Windows Server” error events to a scripting dictionary.

                             II.           Another that would run on a daily basis, analyze the scripting dictionary contents, and send an email (if more than 3 of the same kind of Event has occurred in the past 24 hours).

 

To do the scripting bit, you need to have a pretty good handle on VBScripting, and read up on the scripting sections in our docs.

http://www.kiwisyslog.com/help/syslog/action_run_script.htm

http://www.kiwisyslog.com/help/syslog/scriptingdictionaries.htm

 

I hope that helps!

 

--Christine