How to monitor Windows event logs with snmp polling?

I am very new to Solarwinds Orion, and inherited a fairly complex deployment. We currently have several servers that are set up for SNMP polling, and each of them have SAM monitors deployed to them to monitor for specific events in the Windows event logs. The component monitors are using WMI fetching and are set to inherit credentials from the node. These event monitors are often (but not always) in a hung/unknown state, which I expect since they aren't supposed to be able to inherit credentials when using SNMP polling. Sometimes they are up, however, and I have yet to find a cause for this.

In any case, my question is thus: what is the optimal way to monitor windows event logs for specific events when the node is using SNMP polling? My google-fu has failed me on this endeavor. TIA!

Parents Reply Children