Previous Topic: Create a Log File MonitorNext Topic: Create a History Monitor


Create a Windows Event Monitor

Create a windows event monitor that lets the agent monitor the Windows event log entries using different filters (event source). The agent sends a trap when a match occurs.

Follow these steps:

  1. Click the Resources tab, open the Configure pane, expand Monitoring Templates and appropriate subcategories.

    The Template List page appears.

  2. Select the template in the Template List.

    The Summary page for the template appears.

  3. Click the Monitors tab.

    The Summary page appears with a list of monitors managed by the policy.

  4. Click Windows Event.

    The Windows Event Monitors page appears.

  5. Click + (New) on the Widows Event Monitors toolbar.

    The Windows Event Details: New dialog appears.

  6. Configure the following process settings:
    Index

    Defines the table index that you want to use.

    Platform

    Specifies the platform.

    Description

    Defines an optional description.

    Event Log

    Specifies the event log to read.

    Event Type

    Specifies the event type to match.

    Source Filter

    Defines the source filter to use.

    Description Filter

    Defines the description filter to use.

    Severity

    Specifies the significance of the monitor on a match.

    The Maintenance Window subtab lets you define the following settings:

    State

    Specifies if the monitor maintenance entry is active or inactive.

    Start Time

    Defines the start time when the monitor is switched off and the maintenance window begins.

    Stop Time

    Defines the stop time when the monitor is switched on again and the maintenance window ends.

    The Optional Settings subtab lets you define the flags that can be used for the different monitor entries or history control entries.

  7. Click Save

    The Windows Event Monitor settings are saved.

  8. Click Save Template.

    The Windows Event Monitor is loaded to the Policy.