NTEventlog compare Date/Time

[zubler]

Hi there

We use the NTEventlog Test to monitor the Eventlog of our customers Backup Exec Server. The Problem is, that when for example the last test was good and however Backup Exec crashes without stopping any service and no one notice that. It seems that everything is OK.

To fix this, I'd like to compare the %NTEventTime% with the actual date and then alert if its more than 48 hours between. Or is there another way I can check when no new replies are coming?

Best regards

zubler

[KS-Soft]

As I know Backup Exec records event with ID 34112 when backup is completed.
So you may setup NT Event Log to check for this event and start alerts when new event with ID 34112 is not detected (using "Reverse aler" test property).

Regards
Alex

[zubler]

Hi Alex

Sorry but I don't understand how this will work. Cause the problem persists if Backup Exec writes no more eventlogs I don't get it.

Or can you give me an example how to configure this?

[KS-Soft]

If "Backup Exec writes no more eventlogs", HostMonitor will set "Bad" test status and launch assigned alerts.
How to setup NT Event Log test? Please check the following section: http://www.ks-soft.net/hostmon.eng/mfra ... m#chkNTLog
Then mark "Reverse alert" option.
Quote
==================
Reverse alert
When this option is selected, HostMonitor regards test results that are normally considered benign, as abnormal ones, and vice versa.
This can be useful in some situations. For example, CPU Usage test returns an "Ok" status if the processor load ratio is below a predefined value. With the "Reverse alert" option turned on, the test will work the other way around, so the administrator will be alerted when the processor load is below a predefined value.
==================

In such case HostMonitor will set "Bad" status when no new events detected and set "Ok" status when new event with ID 34112 detected

Regards
Alex