Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Can APM monitor servers Event Logs?

Hello,

We use Microsoft Operations Manager to look into the Event logs of a server and alert us when a particular event should appear. Does Solarwinds do a similar product? We use MOM to monitor Exchange, AD, and many custom rules that I have added should the event appear on a server.

Find more posts tagged with

Accepted answers

RogerWong

Yeah, I was going to direct you to ${IP} on that page, but I'm just as happy that you found it on your own. :-)

Please note: even though it seems as if you should be able to use all sorts of Orion variables in those fields, you can't. The only valid variables for a component monitor are the ones mentioned in the component monitor help page.

All comments

FormerMember

There is an APM script that will alert on specific event log IDs. But if you want to do it in volume, we have the Windows Event Forwarder, which you install on each DC, and it will covert logs into Syslog. Once it's in Syslog, you use Orion's built-in syslog server to create rules.

GonzoUK

I use Dell servers and have about 50 event ID's that I need to be alerted on and have the alert sent to be with the Description.

For example of a Disk fails Dell's Open Manager logs it to the event logs with a description of what disk has failed etc, can all this be email to me? This is what MOM ca do.

FormerMember

If you use the Windows Event Forwarder on each of those servers, it'll convert to Syslog sent to the Orion server. You then create rules on the Syslog server that will send you emails.

rbrault

Did you ever come up with a good solution?

ashley.mason16

Hi,

sorry I am not satisfied with you post I want more information about this…

So please give me more suggestions ……….

RogerWong

Ashley, here is documentation explaining how to configure the Orion APM Windows Event Log Counter template.

Orion APM Admin Guide: Windows Event Log Count

If this is not what you were looking for, can you give more specific details about the problem you'd like help solving?

bleearg13

Sorry to hijack...

I am attempting to use this template and it seems I have to configure a template for each specific server that I want to monitor. Is that correct? If I use 'localhost' as the computer name, it tests the Orion server, which is somewhat pointless.

EDIT: Nevermind - I found the ${IP} variable. RTFM.

RogerWong

Yeah, I was going to direct you to ${IP} on that page, but I'm just as happy that you found it on your own. :-)