Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

System Reboot Alert

max2479

Hello All,

We have an Alert created to send us an email when the system reboots. AD 2003 environment. Mostly 2003 MS servers.

Is there a way to specify who rebooted the system, AD username?

Any help would be great

Find more posts tagged with

Accepted answers

All comments

FormerMember

if you have the syslog send the information then you could include the message in the alert you send out by email.

max2479

Not sure I understood. can you provide a little more detail on how to get this done?

max2479

Actually never mind my last message. I think I know what you mean now. This means I have to install forwarder on each server and send the messages to Orion syslog. OK, it might work. The only think I do not see is Event ID. Does Orion syslog shows Event ID and can it create the alert using that ID. I was only able to do it using message pattern name. Does not work well in some situations

WINNT

I have used this Syslog Message Pattern to show the reason code for the server reboot on Windows 2003:

*USER32 : The reason*,*USER32 : The process winlogon.exe has initiated the restart of computer*

I have Warning and Informational checkboxes checked in Message Severity.