Hi All, I need to get my team alerted when the DHCP server is not working as expected. The actual serve is ping-able, but not responding to DHCP client request and also RDP, hence I need to get the alert. This is the example of the Event ID that should be generating the alert in Solarwinds via email to PagerDuty. * Event ID: 1059 Source: Microsoft-Windows-DHCP-Server Message: The DHCP service failed to see a directory server for authorization. How to achieve that? I've found out that using the expensive & noisy AppInsight for Active Directory is not alerting me about this issue. Thank you in advance.

Generate alert when specific event ID is logged in the server?

Hi All,

I need to get my team alerted when the DHCP server is not working as expected.

The actual serve is ping-able, but not responding to DHCP client request and also RDP, hence I need to get the alert.

This is the example of the Event ID that should be generating the alert in Solarwinds via email to PagerDuty.

Event ID: 1059
Source: Microsoft-Windows-DHCP-Server
Message: The DHCP service failed to see a directory server for authorization.

How to achieve that?
I've found out that using the expensive & noisy AppInsight for Active Directory is not alerting me about this issue.

Thank you in advance.

Hi, @TerryHarding Do I have to manually create the Application Template myself or can I find it in the Shared Templates on Thwack?

How much is the SAM license consumed when I create it my own?

Create your own - it will be one SAM component for each server it’s deployed to.

OK, so I can add the criteria to check for multiple Event ID per application template?

and apply it to one node, then it is counted a 1x SAM license.

Because AppInsight for AD cost 50 licenses.

OK, so I have found out these two Event IDs that I'd like to monitor and trigger an alert when it is logged:

Event ID: 1342
IP address range of scope Corporate - LAN Site 1 is out of IP addresses.
Event ID: 1059
The DHCP service failed to see a directory server for authorization.

There is about 20 DHCP server role that is installed across 40 AD Domain Controllers.

How many licenses do I need to consume/prepare before creating the custom alert?

Note: I do not have the capacity to assign 50 SAM Licenses x 40 AD DC = 2000 additional SAM licenses just to monitor the Event logged.