cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 7

Event Log Alerts - How can you display what was in the log

Currently where something is found in the event log it emails us with the "new information" e-mail template. I tried adding %capture[1]% to get the data from the monitors content generator but that didnt work.


Instead of getting a email with the body of "Found: 1-2 of 2" I'd like to be able to display the actual text in the log.


 Any ideas?


0 Kudos
5 Replies

The only tokens that I see for Windows event log are:

  • %capture[category]
  • %capture[computername]
  • %capture[logfile]
  • %capture[sourcename]
  • %capture[timewritten]
  • %capture[user]

Is there any way to retrieve Type and EventID?

0 Kudos

The only tokens that I see for Windows event log are:

  • %capture[category]
  • %capture[computername]
  • %capture[logfile]
  • %capture[sourcename]
  • %capture[timewritten]
  • %capture[user]

Is there any way to retrieve Type and EventID?



Any chance to get a response from SolarWinds on this? It's been a while since April 21....
Thanks!

0 Kudos

BTSpaul


As Stephane mentioned previously, you can also use %capture[1]% but if you've used it you know that it only displays the event's long description.


Seems strange that you can filter on Event Type and ID in the Event Log Monitor but you can't retrieve them in a Content Generator.


Solarwinds: Another one for the wishlist?


Rgds, Simon

0 Kudos

One more question related to the above: is it possible to change monitor's content generator via mass edit?


Thanks!

0 Kudos

Is it possible to display the content that was returned for a "ADO - QA (SQL Query)" in a e-mail? If so how, I don't see a content generator.

0 Kudos