Systems Management (OpenView-OP Mgmt) Practitioners Forum
cancel
Showing results for 
Search instead for 
Did you mean: 

Monitoring custom event log

engine
Super Collector

Monitoring custom event log

Hi,

I have to monitor the following event log under Windows server 2008 SP2:

Application and services logs -> Microsoft -> Windows -> FailoverClustering -> Operational

which is the correct syntax to use in logfile encapsulator field ?
8 REPLIES
H_16
Frequent Visitor

Re: Monitoring custom event log

What version are you running OMU or OMW??
engine
Super Collector

Re: Monitoring custom event log

OMU 8.35
engine
Super Collector

Re: Monitoring custom event log

logfile path is :

%SystemRoot%\system32\Winevt\Logs\Microsoft-Windows-FailoverClustering%4Operational.evtx
engine
Super Collector

Re: Monitoring custom event log

i have tried this:

%Microsoft-Windows-FailoverClustering%4Operational_LOG%


but it doesn't work
denrie
Super Collector

Re: Monitoring custom event log

Hi!

 

I've got the same Problem, but i want to Monitor those custom logs with "Windows EventLog" - Policies...

 

 

denrie
Super Collector

Re: Monitoring custom event log

Highlighted
Mahmoud Ibrahim
Honored Contributor

Re: Monitoring custom event log

Hi,

look for the .evtx file name you want to monitor and (remove extens replace %4 with / and for log file policy add _LOG

so Microsoft-Windows-FailoverClustering%4Operationa.evtx should be %Microsoft-Windows-FailoverClustering/Operational_LOG%

Regards,
Mahmoud Ibrahim
http://www.mahmoudthoughts.net
  • Say thanks by clicking the "Kudos! Star" which is on the left.

  • Make it easier for other people to find solutions, by marking my answer with "Accept as Solution" if it solves your issue.
  • coreys
    Acclaimed Contributor

    Re: Monitoring custom event log

    So to Monitor to Event  in a Custom Event Log you change this Microsoft-Exchange-HighAvailability%4Operational to Microsoft-Exchange-HighAvailability/Operational_Log does this get typed into  the source to work ?

    //Add this to "OnDomLoad" event