"Windows Event log monitor" does not work

FormerMember

Hello,

APM 4.2.0.

Though I am trying "Windows Event log monitor" in APM, it does not work well.

  (1) Match Definition > Custom > Event Type

        When I set it to "any event", component catch event.

        But, component does not catch event when I set it to other (Error or Warning

        and so on.)

 (2) Match Definition > Custom > Event ID > Exclude specific IDs

        When I set any specific IDs in this box, component catch event with

        specified ID. I think event with specified ID in this box will should be ignored.

 

Is my operation not good ?

 

- KH

eventlogmonitor.JPG

DONDERKA

HI KHira,

Windows Event Log monitor set to Custom Match Definition should work this way:

1. If you fill Exclude specific IDs those IDS will be ignored if found in Event Log. They will not count.

2. If you choose Event Type "Any event" it will count every type of event found in predefined ,by "Number of past polling cycles", time interval. 

3. If you choose other setting for Event Type it should count only events of that particular type.

4. All setting are working together. 

However there is known issue. If you use this monitor against windows which are localized ( f.e. to German, ...) The setting Event Type will not work properly. This problem will be fixed in next release.