KS-Soft. Network Management Solutions
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister    ProfileProfile    Log inLog in 

Eventsource FailoverClustering missing

 
Post new topic   Reply to topic    KS-Soft Forum Index -> Configuration, Maintenance, Troubleshooting
View previous topic :: View next topic  
Author Message
babar.munir



Joined: 23 Jan 2013
Posts: 30

PostPosted: Mon Jul 06, 2015 4:23 am    Post subject: Eventsource FailoverClustering missing Reply with quote

i am using 9.58 HM version, i have to generate an alert SQL failover clustering but HM is not getting FailOverClustering event viewer source.. any solution please?
Back to top
View user's profile Send private message Visit poster's website
KS-Soft



Joined: 03 Apr 2002
Posts: 12795
Location: USA

PostPosted: Mon Jul 06, 2015 5:36 am    Post subject: Reply with quote

What test method do you use?
NT Event Log?
Test settings?
Test performed by HostMonitor or Remote Monioring Agent (RMA)?
Windows?
Service Pack?

What exactly means "HM is not getting"?
What is test status?
Reply field?
Have you checked event log? Do you see NEW "FailOverClustering" events, record added after you have created HostMonitor NT Event Log test?

Regards
Alex
Back to top
View user's profile Send private message Visit poster's website
babar.munir



Joined: 23 Jan 2013
Posts: 30

PostPosted: Mon Jul 06, 2015 10:22 pm    Post subject: Reply with quote

KS-Soft wrote:
What test method do you use?
NT Event Log?

yes
Quote:
Test settings?

i have attached the image
Quote:
Test performed by HostMonitor or Remote Monioring Agent (RMA)?

server is in my LAN, so alert is being performed by HM, other all test are working fine i.e ping, Drive etc except this one
Quote:
Windows?
Service Pack?

windows server 2012R2

Quote:
What exactly means "HM is not getting"?

in event source list, this alert is not displaying "FailoverClustering" see the screenshot
Quote:
What is test status?

its "error" in event viewer of server

Quote:
Have you checked event log? Do you see NEW "FailOverClustering" events, record added after you have created HostMonitor NT Event Log test?

yes as you can see in screen shot of yesterday..
[img]http://tinypic.com/view.php?pic=2mcdgjm&s=8#.VZtTgflp0dQ[/img]

Regards
Alex[/quote][img][/img]
Back to top
View user's profile Send private message Visit poster's website
KS-Soft



Joined: 03 Apr 2002
Posts: 12795
Location: USA

PostPosted: Tue Jul 07, 2015 4:36 am    Post subject: Reply with quote

Quote:
in event source list, this alert is not displaying "FailoverClustering" see the screenshot

Don't see any image related to HostMonitor on this site.
You may send screen shot and test settings to support@ks-soft.net

Alert cannot be displayed in event source list.
Alert, action, action profiles:
http://www.ks-soft.net/hostmon.eng/index-actions.htm

Test
http://www.ks-soft.net/hostmon.eng/index-tests.htm

Event source list can be displayed when you setup NT Event Log test but this has nothing to do with some specific records in event log.
I still do not understand anything

Regards
Alex
Back to top
View user's profile Send private message Visit poster's website
babar.munir



Joined: 23 Jan 2013
Posts: 30

PostPosted: Tue Jul 07, 2015 7:05 am    Post subject: Reply with quote

http://tinypic.com/view.php?pic=2mcdgjm&s=8#.VZtTgflp0dQ
Back to top
View user's profile Send private message Visit poster's website
KS-Soft Europe



Joined: 16 May 2006
Posts: 2832

PostPosted: Tue Jul 07, 2015 7:39 am    Post subject: Reply with quote

As I can see, you are using old Windows NT mode in NT Event log test.
Try switching to Windows Vista mode.

Quote from manual:
Quote:
Compatibility
For each test item you may choose "Windows NT API" or "Windows Vista+ API" mode. If HostMonitor is started on Windows Vista, Windows 2008 or Windows 7 and target host uses one of these operational systems as well, we recommend using "Windows Vista API" mode. Otherwise you should use "Windows NT API" mode that works fine for Windows 2000, Windows XP and Windows Server 2003 as well.
Note: if you switch mode for existing test, HostMonitor will consider such modified test as new item and ignore "old" events.


Please check for details at:
http://www.ks-soft.net/hostmon.eng/mframe.htm#tests.htm#chkNTLog
Back to top
View user's profile Send private message Send e-mail Visit poster's website
babar.munir



Joined: 23 Jan 2013
Posts: 30

PostPosted: Tue Jul 07, 2015 9:21 pm    Post subject: Reply with quote

thanks i have tried both, but this event is still not in listed
Back to top
View user's profile Send private message Visit poster's website
KS-Soft Europe



Joined: 16 May 2006
Posts: 2832

PostPosted: Wed Jul 08, 2015 6:00 am    Post subject: Reply with quote

Looks like Source should be: Microsoft-Windows-FailOverClustering
We've found similar Source names, that are displayed by Windows Event Viewer as <SourceName>,
while real rource name (discribed in MS manuals and provided by Windows API) is Microsoft-Windows-<SourceName>
Back to top
View user's profile Send private message Send e-mail Visit poster's website
babar.munir



Joined: 23 Jan 2013
Posts: 30

PostPosted: Wed Jul 08, 2015 10:26 pm    Post subject: Reply with quote

thanx alot yes it is Microsoft-Windows-FailOverClustering
Back to top
View user's profile Send private message Visit poster's website
KS-Soft Europe



Joined: 16 May 2006
Posts: 2832

PostPosted: Thu Jul 09, 2015 12:59 am    Post subject: Reply with quote

You are welcome!
Back to top
View user's profile Send private message Send e-mail Visit poster's website
babar.munir



Joined: 23 Jan 2013
Posts: 30

PostPosted: Mon Jul 13, 2015 3:57 am    Post subject: Reply with quote

the Micorsoft-windows-failoverclustering is displaying in the list when i select compatibility mode "Use windows NT API (Supported by windows 2000, XP and widnows 2003 as well) but this did not solve my problem because i did not receive any alert today which i had configured for this event..what i assume the reason is that this event is "critical" and this key word is missing in this compatibility mode.

as i change compatibility mode to use windows vista+API, "critical" key word is listed in the Event level, but when i try to select event source, it gives me an error.. any solution to this ?

http://tinypic.com/view.php?pic=jkzy2d&s=8#.VaOKq_lp0dQ
Back to top
View user's profile Send private message Visit poster's website
KS-Soft Europe



Joined: 16 May 2006
Posts: 2832

PostPosted: Mon Jul 13, 2015 4:36 am    Post subject: Reply with quote

As I can see, you haven't specified "Connect as" option.
Do you use Connection Manager for that host?
Please make sure "NT Event Log" test method is marked for that host in Connection Manager or specify "Connect as" user credentials.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
babar.munir



Joined: 23 Jan 2013
Posts: 30

PostPosted: Tue Jul 14, 2015 10:03 pm    Post subject: Reply with quote

i am not using connection manager

i have also tried with connect as option by providing the user credentials but issue still persists..

i am not sure if it is issue with windows 2012R2 server ..
Back to top
View user's profile Send private message Visit poster's website
KS-Soft



Joined: 03 Apr 2002
Posts: 12795
Location: USA

PostPosted: Wed Jul 15, 2015 10:23 am    Post subject: Reply with quote

We cannot reproduce the problem.

Question 1 - Why screen shot shows events dated July 04? NT Event Log test does not detect OLD events, only events recorded after you setup test.
So if you setup test correctly on 09 Jul 2015 04:26 (date of your post - Microsoft-Windows-FailOverClustering) then it will detect events recorded after 09 Jul 2015 04:26. It will not detect events recorded on July 04.

Questions 2- Why screen shot shows event source "fai"?
You should type correct event source name.

Could you please send test settings, screen shot of recent events in event log, screen shot of recent test status to support@ks-soft.net?
"recent events" and "recent test status" means - test performed at 2:00pm, event added 2:05pm, test executed 2:10pm (just for examples).

Quote:
i am not using connection manager

You should use either Connection Manager or "Connect as" test property.

Regards
Alex
Back to top
View user's profile Send private message Visit poster's website
babar.munir



Joined: 23 Jan 2013
Posts: 30

PostPosted: Wed Jul 15, 2015 10:36 pm    Post subject: Reply with quote

Quote:
Question 1 - Why screen shot shows events dated July 04? NT Event Log test does not detect OLD events, only events recorded after you setup test.
So if you setup test correctly on 09 Jul 2015 04:26 (date of your post - Microsoft-Windows-FailOverClustering) then it will detect events recorded after 09 Jul 2015 04:26. It will not detect events recorded on July 04.

this event is continuously occurring in event log since last 2 month. and couple of days ago it also occurs.. so it should be detected..

Quote:
Questions 2- Why screen shot shows event source "fai"?
You should type correct event source name.

i was looking failoverclustering event so i typed "fai" to check in the list if this event exists or not.. but as pointed correctly by KS-Soft Europe, the entry was Microst-windows-Failoverclustering

Quote:
Could you please send test settings, screen shot of recent events in event log, screen shot of recent test status to support@ks-soft.net?
"recent events" and "recent test status" means - test performed at 2:00pm, event added 2:05pm, test executed 2:10pm (just for examples).


sure i will

Quote:

You should use either Connection Manager or "Connect as" test property.


i am now using connect as property after pointed out by ks-soft Europe last post.
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    KS-Soft Forum Index -> Configuration, Maintenance, Troubleshooting All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

KS-Soft Forum Index