Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Setting up an Alert for a Windows Event Log Event

I am trying to setup an alert that will check a Windows event log for the term Metaframe and send out an email alert when it comes up. This is for licensing service for Citrix - I have found bits and pieces on how to set this up but not a complete list of how to get this setup from start to completion. Any hints, suggestions, or a link on how to do this would be great. Thanks!

Find more posts tagged with

Accepted answers

HerrDoktor

Alright, so here we go.

- first of all you need your server where your application runs on (in you case citrix) added as a node in Orion

- you need to poll this node by WMI with appropriate administrative credentials

- you need to create (or download) a device template for you citrix application - check the content exchange for SAM, there is a lot of templates there

- once you have your template there you can add a "windows event log component monitor"

- you can configure this component to your needs (specify event source/ID/text....) and give it a proper name

- then you define what this means e.g. if the event is seen in the log this is a warning or this is to be treated as critical.

- now you set up your alerts, usually you keep your alerts as general as possible (e.g. alert me if a SAM component monitor goes into warning/critial state)

- within the alert you specify the alert message to include your component name (now you know why to give it a proper name)

- set a reset condition

now you should be set

All comments

HerrDoktor

Are you already monitoring this event with SAM and you only need help setting up the alert, or are you not even monitoring the event yet.

cheer,

Holger

martian_monster

Nope I do not have this setup at all in SAM. There is a citrix event that we need to monitor I have the event ID in citrix and the name that comes up in source. So I need to create monitoring of the event and configure an alert when it goes to offline or shows warning in the event log.