How do I monitor a Windows EventLog?

sPeople 11 years ago updated by Konstantin (Here to help) 11 years ago 5

Is this even possible? planned? eta?

Hey! You can monitor pretty much everything with us :)

Prebuilt Monnitor template for OS sys logs is in roadmap. Currently you may use custom shell monitor for this purpose. For example, the following command

powershell -Command "@(Get-EventLog System -After (Get-Date).addMinutes(-5) -EntryType Error).Count"

returns the number of failed event log entries for the last 5 mins (don't forget to set Monitor polling period accordingly). You should then put threshold to check that output is zerro.

Let me know if this solves your problem for now. thanks

Hmm, the above powershelle command takes approx 5 seconds on the server in question. This results in a timeout from the anturs monitor. I cannot find any way to change the timeout value on a "custom shell monitor"?

Hi! Whether timeout happens during Monitor set-up (when you hit Execute or Test buttons) or it happens after Monitor is configured? 

What i mean is that during normal run the timeout is 30 sec, while timeout is less for a run from configuration dialog. 

It was the "test button" that gave me the timeout. During normal runs it works as expected. It would be nice to be able to specify the timeout value on the monitor

So far we do not see that many cases for timeout to be more than 30 sec. However, you are right, for custom monitors it may make sense sometimes to tune it. If you bump into an example case please let us know.