Monitoring the Event Log's

I'm trying to monitor events (specifically when a IS Mailbox Store dismounts/stops) within the eventlog on an Exchange 2003 server.

I can see how I do it using ipMonitor, we don't have that, but we currently have NPM and APM.

Is there a way to monitor the following event log entry, and have either NPM or APM alert on it..

Event Type: Information
Event Source: MSExchangeIS Mailbox Store
Event Category: General
Event ID: 9539
Date:  5/5/2009
Time:  12:43:37 PM
User:  N/A
Computer: XXXXXX

Thanks very Much

Lee

Find more posts tagged with

exchange_monitor

event_log

Accepted answers

bshopp

The Syslog Viewer tool is installed on the server in which you installed Orion NPM on.

All comments

cdoyle

There's an additional component that you can use called the Windows Event Log Forwarder. This will forward Windows events as Syslog messages to your Orion server - you can then create an alert/filter rule in the Syslog Viewer tool to alert based on receiving those syslog messages.

The Windows Event Log forwarder tool is free to download once you have Orion NPM - you can find it in your customer portal under "Additional Components" in the Orion section.

Hope this helps!

bchamberlain

I've installed the Windows Event Log Forwarder on a server. How do I do the second part? I can't figure out how to create an alert/filter rule in the "Syslog Viewer" tool, I don't even know where that tool is.

bshopp

The Syslog Viewer tool is installed on the server in which you installed Orion NPM on.

bchamberlain

Got it, thanks!