Re: How to send email after an application warning occurs
- From: "Anthony" <anthony.spam@xxxxxxxxxxxxxx>
- Date: Tue, 8 May 2007 09:35:08 +0100
Its a very interesting subject. If you monitor on the basis of opting in,
you are assuming you know all interesting events in advance. If you monitor
all errors and warnings you will be constantly alerted by unimportant
events. If you got one of those errors that writes to the event log every
second you would have an unusable mailbox. The only effective way I can see
is to select what to monitor, then filter out before alerting.
A very simple system is to use Snare to send to Kiwi Syslog, then set up
alerts with filters. Every time you get an uninteresting warning or error
you add it to the filter.
I can see that EventTriggers is a good way to be alerted to a specific event
or set of events with no filtering, and in some cases that may be all you
need.
Anthony
http://www.airdesk.co.uk
"Herb Martin" <news@xxxxxxxxxxxxxx> wrote in message
news:u4%23hfQQkHHA.208@xxxxxxxxxxxxxxxxxxxxxxx
"Anthony" <anthony.spam@xxxxxxxxxxxxxx> wrote in message
news:u5cWhROkHHA.1216@xxxxxxxxxxxxxxxxxxxxxxx
The main thing is that if you are going to monitor event logs you will
need to filter out unimportant events. For example, your log might have a
load of MrxSmb errors that you don't want to be alerted to. On the other
hand, you can't just specify the errors you do want to raise an alert, in
case it is something you had not thought of.
- Snare is a good Open Source way of filtering events, but you need to
find your own way to trigger an e-mail.
- Netikus Event Sentry is a good product for filtered alerts.
- Altiris Monitor Solution is an excellent full-featured monitoring and
management solution.
The built-in EventTriggers.exe addresses this need directly; to trigger
on any particular combination of event characteristics so as to avoid
false alarms.
Anthony
http://www.airdesk.co.uk
<dev33445@xxxxxxxxx> wrote in message
news:1178565123.162902.284590@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Our server was timing out today for about 20 minutes. Is there a way
to have the event viewer send an email every time the application log
creates a warning? If it is not a built in feature, is there any
trustworthy system monitoring software that will do such a thing?
.
- References:
- How to send email after an application warning occurs
- From: dev33445
- Re: How to send email after an application warning occurs
- From: Anthony
- Re: How to send email after an application warning occurs
- From: Herb Martin
- How to send email after an application warning occurs
- Prev by Date: Re: Custom .adm Administrative Template Tool ?
- Next by Date: Re: RIS on W2k3
- Previous by thread: Re: How to send email after an application warning occurs
- Next by thread: Deleting - Printed in queue
- Index(es):
Relevant Pages
|