Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Windows Event Log Count: Which Eventlogs are Possible?

I was reading the documentation in the APM Administrators guide and it suggests that only the Application, Security, or System Eventlogs can be used with the Windows Event Log Count app template. Is this true or can this application template be used for any Windows Eventlog?

Thanks in advance for any help on this!

Find more posts tagged with

Accepted answers

RogerWong

Byron, that's the old template from APM 2.0 that had to use scripts. That script in that template isn't as flexible as the dedicated Windows Event Log component monitor that got added in V3.5. This newer monitor lets you not only monitor any log you name, it lets you search as many logs as you want in one go.

So, I would suggest creating a new template and add a Windows Event Log Component monitor.

If you set "Log to monitor" to "custom", you then get a bucket load of useful filtering options. They're described below. After you get it set up, you can then assign that to the server you're trying to get the log info from.

http://www.solarwinds.com/netperfmon/SolarWinds/OrionAPMPHComponentTypesWindowsEventLog.htm

All comments

RogerWong

So, I would suggest creating a new template and add a Windows Event Log Component monitor.

http://www.solarwinds.com/netperfmon/SolarWinds/OrionAPMPHComponentTypesWindowsEventLog.htm

byrona

Roger

Yeah, I found the new one right after I posted this question but had not yet had an opportunity to post my own answer as I was pulled into a meeting. I should also point out how totally awesome the new one is, very nice job!

One question I do have about the new one, it it compatible with Windows 2008 and the changes they made to the Eventlog facility?

jiri.tomek

Hello,
unfortunately Windows 2008/Vista/7 event logs structure is not supported. You can still access standard windows logs (Application, Security, System) but logs in "Applications and Services Logs" are not accessible using method that APM uses. Main problem is that API to access those logs is not available on Windows 2003 systems so even if APM would include this functionality, you wouldn't be able to use it on pre-Vista systems.

byrona

Hello,
unfortunately Windows 2008/Vista/7 event logs structure is not supported. You can still access standard windows logs (Application, Security, System) but logs in "Applications and Services Logs" are not accessible using method that APM uses. Main problem is that API to access those logs is not available on Windows 2003 systems so even if APM would include this functionality, you wouldn't be able to use it on pre-Vista systems.

Wouldn't it be possible for SolarWinds to write a new application monitor that is pretty much the same as this one but designed specifically for Windows 2008/Vista/7 systems that would allow access to the "Applications and Services Logs"?