Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Windows Event monitoring for a specific ID

cherian_07

Hi Team,

Would like to know if Windows Event monitoring is possible for a particular ID and how do i go about it ?

Basically I have to configure event monitroing for couple of servers so that I get warning for 1 Particular ID(20400).

Let me know if how this can be done.

Thanks.

Find more posts tagged with

Accepted answers

All comments

phil3

Hi, there.

The Windows alerts in LEM reflect the Event ID in the ProviderSID field. Use this, along with the DetectionIP field for the computers you want to monitor, to get what you're looking for. You can use a group (such as a User-Defined Group or Tool Profile) to monitor several computers, and the process will be essentially the same whether you're creating a filter or rule.

For more information about working with filters and rules, consult the following:

Creating Filters for Real-time Monitoring in Your LEM Console

Creating Rules from Your LEM Console to Take Automated Action

Let me know if you have any questions or run into any issues.

Thanks.

cherian_07

Hi Phil,

I am using APM for Windows Log Monitoring.

Let me know how to go about using APM to monitor Event ID.

Thanks

Rony

phil3

Hi, Rony.

I'll ask the moderator to move this to the APM board and I'll give the APM writer a heads up.

Thanks.

cherian_07

Appreciate you help Phil

FormerMember

Hijacking an old thread. I have SAM 5.0.1, does Windows Event Log Monitoring come in this version? I don't see it, is it another module?

aLTeReGo

Yes, the Windows Event Log Monitor has existed since APM 3.1. It's a component monitor type that can be added to any application template. It's also used in several out-of-the-box application templates. For example the Errors in Application Event Log template.

FormerMember

As soon as I typed this, went upstairs to grab a Coke, came back I found

the template. Sometimes you just to need to walk away.

Thanks for the reply.

Chris.

On Wed, Aug 15, 2012 at 3:58 PM, aLTeReGo <