Create Event Log Monitor for a specific event id

meetoo 19
Viewed 0

I have seen the video about how to create an event log monitor for a specific event, but the one i created is not working. I want any device that generates Event id 6009 in the system log to generate an alert.

for the new monitor, i chose Microsoft-Windows-Eventlog; checked the box for Event ID & Filters and added 6009 to the 'Include' list, checked the box in the Info column. chose Apply

I then rebooted a server and while it generated the 6009 event, no alert was sent from Server Monitor

what am I missing?
Thx

alert eventid
2 Answers

Hi meetoo,

Would you please send us a screenshot of the settings for your monitor and a screenshot of the event log entry that your reboot created. You can send them to support@poweradmin.com

Thanks
Quinn

Please make sure to mark your questions accepted when you have your answer by clicking the gray checkmark to the left of the answer.

Quinn2713

Hi meetoo,

In the monitor's settings it appears that you have selected a different Event Source than where the event is recorded. You selected "Microsoft-Windows-Eventlog" but you should change that to "Eventlog". Remember to change your filter to the Eventlog. Also, make sure that you monitor is set to read the System log under the Event Logs to Monitor. 

Both of these settings should get you what you are looking for.

Thanks
Quinn

Please make sure to mark your questions accepted when you have your answer by clicking the gray checkmark to the left of the answer.

Quinn2713
Related