Windows Event Log monitor not working

To the Ipswitch web site

Ipswitch Forums
Home      Members   Calendar   Who's On
Welcome Guest ( Login | Register )
      



Windows Event Log monitor not workingExpand / Collapse
Author
Message
Posted 12/22/2008 10:08:47 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 12/22/2008 3:17:10 PM
Posts: 7, Visits: 36
Howdy,

I've setup a passive monitor to check when a server has been rebooted. I added a Windows Event Log and created a new library to monitor Windows Event Log = 6009. When I check under passive monitor error reports, it shows up (kinda cryptic) but under Windows Event Logs there's nothing. It shows that it's on and passively monitoring. I'm running version 11.3.

Can someone give me an idea why is not detecting the reboot or the Event ID = 6009? Perhaps there's a better way of monitoring when a server gets rebooted. Any help would be appreciated...Thanks!
Post #49711
Posted 12/22/2008 2:43:57 PM


Member of the WhatsUp Gold team

Member of the WhatsUp Gold teamMember of the WhatsUp Gold teamMember of the WhatsUp Gold teamMember of the WhatsUp Gold teamMember of the WhatsUp Gold teamMember of the WhatsUp Gold teamMember of the WhatsUp Gold teamMember of the WhatsUp Gold team

Group: Administrators
Last Login: 8/3/2009 11:21:39 AM
Posts: 515, Visits: 1,116
Did a quick search of our defect database and found one issue that might be affecting you. It was reported against version 11.0.2.

There is a defect with Windows Event log passive monitors that requires the same credentials on the computer sending the event and the WUG computer. (This is issue #10158). Can you confirm that the same account exists and is being used on both?


__________________________________________________
Will Sansbury
Member of the WhatsUp Gold team
Twitter: @willsansbury


NOTE: These WhatsUp Gold forums are closing! We've launched a new and improved user community that includes forums, a place to share and vote on feature requests, and a place to share and download custom scripts. Check it out at http://community.whatsupgold.com!
Post #49729
Posted 12/22/2008 3:18:43 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 12/22/2008 3:17:10 PM
Posts: 7, Visits: 36
Yep. Same user credentials. All those machines are on the same domain.
Post #49730
Posted 12/30/2008 9:10:53 AM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 11/2/2009 2:43:30 PM
Posts: 15, Visits: 55
looks like the event is getting logged before the NIC Negotiates a physical connection with the network. Try monitoring for a different event that only gets logged at Bootup (IE Anti-Virus application starting) Still trying to figure this one out myself to find something more accurate. For the time being im relying on the Symantec End Point Service to act as my trigger since that only starts at bootup.
Post #49817
« Prev Topic | Next Topic »


Reading This TopicExpand / Collapse
Active Users: 0 (0 guests, 0 members, 0 anonymous members)
No members currently viewing this topic.
Forum Moderators: Dave, Mark Singh, kevin r gillis, Jason Benton, Christian Lawson, Brandon Felger, Tripp Allen, Will Sansbury, Jason Williams, Hush, FTPplanet.com, Hugh Garber, WUP-PM, mmulryan@ipswitch.com, mswimm

PermissionsExpand / Collapse

All times are GMT -5:00, Time now is 12:13pm

Powered By InstantForum.NET v4.1.4 © 2010
Execution: 0.063. 7 queries. Compression Enabled.