Event Log Alerts - How can you display what was in the log

[eskador]

Currently where something is found in the event log it emails us with the "new information" e-mail template. I tried adding %capture[1]% to get the data from the monitors content generator but that didnt work.

Instead of getting a email with the body of "Found: 1-2 of 2" I'd like to be able to display the actual text in the log.

 Any ideas?

[BTSpaul]

The only tokens that I see for Windows event log are:

• %capture[category]
• %capture[computername]
• %capture[logfile]
• %capture[sourcename]
• %capture[timewritten]
• %capture[user]

Is there any way to retrieve Type and EventID?

[BTSpaul]

The only tokens that I see for Windows event log are:

• %capture[category]
• %capture[computername]
• %capture[logfile]
• %capture[sourcename]
• %capture[timewritten]
• %capture[user]

Is there any way to retrieve Type and EventID?

Any chance to get a response from SolarWinds on this? It's been a while since April 21....
Thanks!

[simonpt]

BTSpaul

As Stephane mentioned previously, you can also use %capture[1]% but if you've used it you know that it only displays the event's long description.

Seems strange that you can filter on Event Type and ID in the Event Log Monitor but you can't retrieve them in a Content Generator.

Solarwinds: Another one for the wishlist?

Rgds, Simon

[BTSpaul]

One more question related to the above: is it possible to change monitor's content generator via mass edit?

Thanks!

[eskador]

Is it possible to display the content that was returned for a "ADO - QA (SQL Query)" in a e-mail? If so how, I don't see a content generator.