ad_server probe event log message

[Nijin K]

Hi all

I am trying to configure event log alarms for DNS but the message I receive is profile matched which basically means that it detected some error in event log but in the message there is no option to add the matched error text like in logmon
so want to check if there is way to get the error text in the message
please suggest

[Nijin K]

hi team 

any suggestions

regards
nijin

[Issac08]

Can you use ntevel probe to do event based monitoring.

[David Michel]

Reviewing the ad_server documentation, an event log profile is configured to monitor a specifics:
Log: specifies the log file to monitor.
Computer: specifies the computer name to be searched in the log file entries.
Source: specifies the source name to be searched in the log file entries.
Severity: selects the severity to be searched in the log file entries.
User: specifies the user name to be searched in the log file entries.
Category: specifies the category to be searched in the log file entries.
Event ID: specifies an event ID to be searched in the log file entries.
Message: specifies the message to be searched in the log file entries.

So it is designed to match on a very specific thing, and hence there isn't a need for an alarm message variable, and the profile name would be the indicator of what it is about. 

Issac08's recommendation for ntevel makes sense since it does support variables for the alarm message.

[Andrew Cooper]

And of course you  have the adevl probe (which is an addon to the ntevl)

------------------------------
Knows a little about UIM/DXim, AE, Automic
------------------------------