CA SystemEDGE User Guide › Windows Event Monitoring › Remove Windows Event Monitoring Entries

Remove Windows Event Monitoring Entries

To stop monitoring Windows events, you must remove the appropriate entry from the NT Event Monitor table and the sysedge.cf file. Removing an entry using point configuration from the CA Virtual Assurance user interface accomplishes both. Manual removal requires that you remove the entry from both places in separate operations.

To remove Windows event monitor entries in CA Virtual Assurance

1. Access the CA Virtual Assurance user interface.
2. Click the Resources tab.

   The Managed Resource pane and Data Center page appear.

3. Expand Managed in the Managed Resource pane and select the server on which the agent resides.

   A page appears with server details.

4. Click Configuration, then click NT Event Monitors.

   The NT Event Monitor table appears with all existing self monitors.

5. Select the monitor to delete and click Actions, Delete.

   The entry is deleted from the table. The agent performs a warm start to apply the change.

To remove Windows event monitor entries manually

1. Delete the watch ntevent directive for the entry from the local sysedge.cf file and save the file.
2. Run the edgewatch utility using one of the following commands for the -o parameter:

   -o delete index
   

   -o setstatus index 6
   

   index

   Specifies the index value of the Windows event monitor entry to remove.

   When using the setstatus command, a value of 6 sets the row status to destroy and deletes the entry.

3. Restart the agent.

   The entry is deleted.