Unable to catch all NT log events

[papalima]

I'm connecting to a W2K server and catch every 5 minutes 'errors' and 'warnings' from the NT event log.

When there are multiple errors in the event log I can only see the first error in the 'log viewer'.

I don't want to miss events, how can I see all events in the log file???

Regards...

[KS-Soft Europe]

Please, enable "Report about all "Bad" events" option. With this option enabled HostMonitor will inform you about each event that satisfies specified requirements. This option is useful when you use one test item to check for different error events (e.g. you are checking for any event with "Failure Audit" type).

http://www.ks-soft.net/hostmon.eng/mfra ... m#chkNTLog

Regards,
Max

[papalima]

I did checked 'report about all bad events' and 'until status changes' but without result in getting all events.

[KS-Soft Europe]

HostMonitor changes test status to "Bad" only when it has found NEW event(s) that satisfies all specified requirements. If, after the next probe, the monitor does not find a new "Bad" event, it changes the test status to "Ok".

Regards,
Max

[KS-Soft]

I don't want to miss events, how can I see all events in the log file???

Use "save information about every performed test" option (common log option specified on Log Settings page in the Options dialog) or "Full" logging option located in Test Properties dialog

Regards
Alex

[papalima]

HostMonitor changes test status to "Bad" only when it has found NEW event(s) that satisfies all specified requirements. If, after the next probe, the monitor does not find a new "Bad" event, it changes the test status to "Ok".

Just to be sure I understand correctly:
- 12:00 there are 5 errors written in the event log
- 12:05 every 5 minutes HostMonitor checks this event log, is it posible to log all 5 errors whithout having 'full loging' set to true???

[KS-Soft]

- 12:05 every 5 minutes HostMonitor checks this event log, is it posible to log all 5 errors whithout having 'full loging' set to true???

If HostMonitor detects 5 new "bad" events and 'report about all bad events' test option is selected, it reports about 5 events - HostMonitor sets Bad status and shows event descriptions in Reply field (one by one).
However if you are using "Brief" logging mode, HostMonitor will not record all events to the log because status of the test remains the same (bad, bad, bad, bad and bad again).
So, yes - you should use 'Full' logging mode. Or if you do not like 'Full' mode, you may use 'Reply' mode.

Regards
Alex

[papalima]

Thank by the way for the fast help!!!

Or if you do not like 'Full' mode, you may use 'Reply' mode.

What's that, where can I enable it???

[KS-Soft Europe]

You may change logging mode for particular tests in the Test Properties dialog by choosing one of the options:
- Default - the common settings defined in the Options dialog are used;
- Brief - record information whenever status of the test changes;
- Full - record all test results, regardless of whether their status had changed or not;
- Reply - record information into log every time the status or reply value of the test changes.

http://www.ks-soft.net/hostmon.eng/mfra ... s.htm#Logs
Default log settings you may specify in Options > Log Settings page
http://www.ks-soft.net/hostmon.eng/mfra ... ns.htm#Log

Regards,
Max

[papalima]

You may change logging mode for particular tests in the Test Properties dialog by choosing one of the options:
- Default - the common settings defined in the Options dialog are used;
- Brief - record information whenever status of the test changes;
- Full - record all test results, regardless of whether their status had changed or not;
- Reply - record information into log every time the status or reply value of the test changes.

Any chance for a new mode in a next version???
- Bad - records all bad test results

Regards...

[KS-Soft]

You don't like "Reply" mode? Then you may customize logging as you wish using "Record HM log" action

Regards
Alex