Understanding event log monitoring

How does the event log monitoring work?

Event log monitoring is crucial to track specific events across all Windows devices in a unified console. Add event log checks to your Windows server and start monitoring them. Watch a quick video to know how to set it up.

When the particular event occurs, then the event log check is turned to "Down" status and an alert will be triggered for the same.

For an event log check, the following are the mandatory fields:
  • Check Name
  • Log Type 
  • Severity Level
With the basic configuration, alerts will be triggered on the first occurrence of the event, based on the configured log type and severity level.

In advanced configuration, the user has to specify the event ID and the number of occurrences the event will occur. For number of occurrences 'n' greater than 1, the timeout period should be mentioned.

For example, if the number of occurrences is set to 2, the Windows server monitoring agent will notify Site24x7 only when the configured event check occurs 2 or more times. This will move the monitor status to trouble. For consecutive events, alerts will not be sent and the monitor status will continue to be in the trouble state. Only when the number of occurrences becomes less than 2, the monitor will be up again and the agent will continue to look for occurrence of the event 2 or more times.

    • Related Articles

    • Troubleshooting false positive alerts in monitoring

      Problem False positive alerts are being generated. Possible cause The monitoring system is down in some locations. The Website monitor might be configured for one location, such as Seattle, but may appear down when accessed from another location, ...

    • Unable to add SQL insight monitor

      If the SQL Insight monitor is not getting added even after entering your credentials, try these troubleshooting steps: Ensure that the Auto-discover applications feature is enabled. If not, you will need to trigger discovery using the Discover ...

    • How to retrieve logs from different Site24x7 monitors

      The log location varies with different agents and monitors. View a consolidated list here: Site24x7 Server Monitoring agent Monitor or module OS Directory, path, or command Detailed reference Server Monitoring Agent Windows Installation directory > ...

    • How does Site24x7 always ensure the availability of its location agents during monitoring?

      Site24x7 uses a preferred location recheck logic in the back-end to ensure the availability of all monitoring locations. This logic is only applied when you've disabled the option "Restrict monitoring within selected locations" in the Add or Edit ...

    • Executables and scripts to allow for Windows server monitoring

      One of the reasons you could not enable Site24x7 server monitoring could be your organization's group policy denying access to the executables, scripts, and batch files associated with Site24x7 server monitoring. Mark the following executables, ...