Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

How does the Windows Event Forwarder determine severity?

I am trying to find exactly how the Windows Event Forwarder maps event logs to syslog severity levels. Is there any documentation on this? I have some informational messages in the Windows event log that are categorized as emergency messages on my NPM syslog server.

John

Find more posts tagged with

Accepted answers

All comments

AllisonB

jkennedy, please take a look at these links and see if they help...

Network Performance Monitor Administrator Guide : Monitoring Syslog Messages : Syslog Message Priorities

Network Performance Monitor Administrator Guide : Monitoring Syslog Messages : Syslog Message Priorities : Syslog Facilities

Network Performance Monitor Administrator Guide : Monitoring Syslog Messages : Syslog Message Priorities : Syslog Severities

chris.lapoint

I am trying to find exactly how the Windows Event Forwarder maps event logs to syslog severity levels. Is there any documentation on this? I have some informational messages in the Windows event log that are categorized as emergency messages on my NPM syslog server.

John, I know this doesn't really answer your question, but I'm hoping it will help. Have you tried using the new SolarWinds Log Forwarder for Windows? It replaces the old Windows Event Forwarder and provides more control over filtering and assignment of Syslog priority.

Assuming your current on maintenance, you should be able to download from your customer portal in the additional components section.