I have setup a test to check in the Application Event log for Backup Exec fails with the following error codes:
58053, 34114, 34113, 58057, 65314, 58061
However - it is not working properly - it only picks up error 34114!
the test has been setup on another host monitor elsewhere and that works fine on the same server with the same settings.
I first thought that the fault was due to 2 host monitors connecting up to the same server and one pulling the information and resetting a time stamp - but i disabled the other test and it has not worked.
Log test not working...
-
KS-Soft Europe
- Posts: 2832
- Joined: Tue May 16, 2006 4:41 am
- Contact:
1. Please ensure you have selected "Any from the following" option from "Event ID" area in "Event Log Test Properties" window.
2. Please enable "Report about all "bad" events" option in "Event Log Test Properties" window.
Quote from the manual: http://www.ks-soft.net/hostmon.eng/mfra ... m#chkNTLog
===================
Report about last "Bad" event
With this option enabled HostMonitor will scan (starting from the end of the log) all new events (events those appeared after previous probe) till first (ok, 'last' because it scans from the end) "Bad" event. If new "Bad" event is detected, HostMonitor marks test as "Bad" and performs specified alert actions if necessary.
For example: if HostMonitor performs test every 10 minutes and 3 "Bad" events occurred within this time interval, HostMonitor will report only about last one. This option is useful when you check for some specific event and don't need many messages about the same recurring error.
Report about all "Bad" events
In opposite to previous mode, with this option enabled HostMonitor will inform you about each event that satisfies specified requirements. This option is useful when you use one test item to check for different error events (e.g. you are checking for any event with "Failure Audit" type). BTW do not forget to use "Repeat: until status changes" option for appropriate alert actions.
===================
Regards,
Max
2. Please enable "Report about all "bad" events" option in "Event Log Test Properties" window.
Quote from the manual: http://www.ks-soft.net/hostmon.eng/mfra ... m#chkNTLog
===================
Report about last "Bad" event
With this option enabled HostMonitor will scan (starting from the end of the log) all new events (events those appeared after previous probe) till first (ok, 'last' because it scans from the end) "Bad" event. If new "Bad" event is detected, HostMonitor marks test as "Bad" and performs specified alert actions if necessary.
For example: if HostMonitor performs test every 10 minutes and 3 "Bad" events occurred within this time interval, HostMonitor will report only about last one. This option is useful when you check for some specific event and don't need many messages about the same recurring error.
Report about all "Bad" events
In opposite to previous mode, with this option enabled HostMonitor will inform you about each event that satisfies specified requirements. This option is useful when you use one test item to check for different error events (e.g. you are checking for any event with "Failure Audit" type). BTW do not forget to use "Repeat: until status changes" option for appropriate alert actions.
===================
Regards,
Max
hiya again..
after playing around and making not of what you said... still didnt work..
so I have imported the test I know that works on a different host monitor - still fails to detect an error...
Here is the exported test:
; ------- Test #01 -------
Method = NTLog
;--- Common properties ---
;DestFolder = Root\Server\
RMAgent = Server
Title = BackupExec - Backup Exec eventlog failures
Comment = NTLog <local computer>:Backup Exec
RelatedURL =
ScheduleMode= Regular
Schedule = 7 Days, 24 Hours
Interval = 60
Alerts = Do nothing
ReverseAlert= No
UnknownIsBad= Yes
WarningIsBad= Yes
UseCommonLog= Yes
PrivateLog = C:\temp\steve_backup.log
PrivLogMode = Full
CommLogMode = Default
;--- Test specific properties ---
Computer =
Log = Application
Source = Backup Exec
CheckComp = Any
CheckType = Any
CheckID = AnyFromList
CheckDescr = Any
CompList =
TypeList = Error
IDList = ^M58053^M34114^M34113^M58057^M65314^M58061^M
DescrList =
ReportMode = AllEvents
after playing around and making not of what you said... still didnt work..
so I have imported the test I know that works on a different host monitor - still fails to detect an error...
Here is the exported test:
; ------- Test #01 -------
Method = NTLog
;--- Common properties ---
;DestFolder = Root\Server\
RMAgent = Server
Title = BackupExec - Backup Exec eventlog failures
Comment = NTLog <local computer>:Backup Exec
RelatedURL =
ScheduleMode= Regular
Schedule = 7 Days, 24 Hours
Interval = 60
Alerts = Do nothing
ReverseAlert= No
UnknownIsBad= Yes
WarningIsBad= Yes
UseCommonLog= Yes
PrivateLog = C:\temp\steve_backup.log
PrivLogMode = Full
CommLogMode = Default
;--- Test specific properties ---
Computer =
Log = Application
Source = Backup Exec
CheckComp = Any
CheckType = Any
CheckID = AnyFromList
CheckDescr = Any
CompList =
TypeList = Error
IDList = ^M58053^M34114^M34113^M58057^M65314^M58061^M
DescrList =
ReportMode = AllEvents
-
KS-Soft Europe
- Posts: 2832
- Joined: Tue May 16, 2006 4:41 am
- Contact:
Thanks -
Host monitor version I have been using is 6.82 then jumped to 7.0B and now running 7.06B - all have the same effect
The server is Windows 2003 Small Business Server SP2 (with all current patches)
The host monitor station is Windows XP Pro SP2 (with all current patches)
Version of RMA is what ever was supplied with the above version of host monitor install pack (so at the moment, latest version)
I dont know if this would effect it - however the host monitor computer is not always running... and is not usualy running when the error occures... lets say error happens at 130am and the monitor machine is switched on at 10am... i would not have thought that would make a difference???
Steve
Host monitor version I have been using is 6.82 then jumped to 7.0B and now running 7.06B - all have the same effect
The server is Windows 2003 Small Business Server SP2 (with all current patches)
The host monitor station is Windows XP Pro SP2 (with all current patches)
Version of RMA is what ever was supplied with the above version of host monitor install pack (so at the moment, latest version)
I dont know if this would effect it - however the host monitor computer is not always running... and is not usualy running when the error occures... lets say error happens at 130am and the monitor machine is switched on at 10am... i would not have thought that would make a difference???
Steve
Yes, it makes the difference. HostMonitor does not care about events that appear while monitor is not startedI dont know if this would effect it - however the host monitor computer is not always running... and is not usualy running when the error occures... lets say error happens at 130am and the monitor machine is switched on at 10am... i would not have thought that would make a difference???
Regards
Alex
