Re: Monitoring custom event log (1228 Views)
Reply
Advisor
Posts: 28
Registered: ‎06-22-2010
Message 1 of 8 (1,279 Views)

Monitoring custom event log

Hi,

I have to monitor the following event log under Windows server 2008 SP2:

Application and services logs -> Microsoft -> Windows -> FailoverClustering -> Operational

which is the correct syntax to use in logfile encapsulator field ?
Trusted Contributor
Posts: 893
Registered: ‎09-04-2003
Message 2 of 8 (1,256 Views)

Re: Monitoring custom event log

What version are you running OMU or OMW??
Advisor
Posts: 28
Registered: ‎06-22-2010
Message 3 of 8 (1,256 Views)

Re: Monitoring custom event log

OMU 8.35
Advisor
Posts: 28
Registered: ‎06-22-2010
Message 4 of 8 (1,256 Views)

Re: Monitoring custom event log

logfile path is :

%SystemRoot%\system32\Winevt\Logs\Microsoft-Windows-FailoverClustering%4Operational.evtx
Advisor
Posts: 28
Registered: ‎06-22-2010
Message 5 of 8 (1,256 Views)

Re: Monitoring custom event log

i have tried this:

%Microsoft-Windows-FailoverClustering%4Operational_LOG%


but it doesn't work
Advisor
Posts: 24
Registered: ‎07-22-2008
Message 6 of 8 (1,253 Views)

Re: Monitoring custom event log

Hi!

 

I've got the same Problem, but i want to Monitor those custom logs with "Windows EventLog" - Policies...

 

 

Advisor
Posts: 24
Registered: ‎07-22-2008
Message 7 of 8 (1,250 Views)

Re: Monitoring custom event log

Highlighted
Honored Contributor
Posts: 1,573
Registered: ‎05-21-2008
Message 8 of 8 (1,228 Views)

Re: Monitoring custom event log

Hi,

look for the .evtx file name you want to monitor and (remove extens replace %4 with / and for log file policy add _LOG

so Microsoft-Windows-FailoverClustering%4Operationa.evtx should be %Microsoft-Windows-FailoverClustering/Operational_LOG%

Regards,
Mahmoud Ibrahim
http://www.mahmoudthoughts.com
  • Say thanks by clicking the "Kudos! Star" which is on the left.

  • Make it easier for other people to find solutions, by marking my answer with "Accept as Solution" if it solves your issue.
  • The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.