Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Windows Event Log Monitoring in a nested log directory

I am trying to alert on an specific event ID in the Microsoft\Exchange\HighAvailability\Operational log. Thus far, I have not had any luck with the syntax.

In the Template, there is a place to select the "Log to Monitor", and so I choose custom. I have tried Microsoft-Exchange-HighAvailability\Operational (the way it appears in the Event Viewer), Microsoft\Exchange\HighAvailability\Operational, Microsoft-Exchange-HighAvailability-Operational, but none return any data.

Any sage advice?

Find more posts tagged with

exchange

monitor

log

event

Windows

Accepted answers

All comments

aLTeReGo

Monitoring Nested Logs using the Windows Event Log Monitor in SAM is currently not possible, but should be in the next release using the new RPC method. If you'd like to try it out yourself and report back your findings we'd love to hear your feedback. You can sign-up here to download the latest SAM 5.5 beta.

beeler4304

Has this been fixed? I am trying to figure out how to do the nested log monitoring too and I am currently using SAM 6.5.

aLTeReGo

This was addressed quite a while ago. Please see the following thread.

Using Windows Event Log Monitor on Deep Logs

beeler4304

Thanks for the link. That helped me out