Eventsource FailoverClustering missing

babar.munir · Post by **babar.munir** » Mon Jul 06, 2015 4:23 am

i am using 9.58 HM version, i have to generate an alert SQL failover clustering but HM is not getting FailOverClustering event viewer source.. any solution please?

KS-Soft · Post by **KS-Soft** » Mon Jul 06, 2015 5:36 am

What test method do you use?
NT Event Log?
Test settings?
Test performed by HostMonitor or Remote Monioring Agent (RMA)?
Windows?
Service Pack?

What exactly means "HM is not getting"?
What is test status?
Reply field?
Have you checked event log? Do you see NEW "FailOverClustering" events, record added after you have created HostMonitor NT Event Log test?

Regards
Alex

babar.munir · Post by **babar.munir** » Mon Jul 06, 2015 10:22 pm

KS-Soft wrote:What test method do you use?
NT Event Log?

yes

Test settings?

i have attached the image

Test performed by HostMonitor or Remote Monioring Agent (RMA)?

server is in my LAN, so alert is being performed by HM, other all test are working fine i.e ping, Drive etc except this one

Windows?
Service Pack?

windows server 2012R2

What exactly means "HM is not getting"?

in event source list, this alert is not displaying "FailoverClustering" see the screenshot

What is test status?

its "error" in event viewer of server

Have you checked event log? Do you see NEW "FailOverClustering" events, record added after you have created HostMonitor NT Event Log test?

yes as you can see in screen shot of yesterday..

Regards
Alex[/quote]

KS-Soft · Post by **KS-Soft** » Tue Jul 07, 2015 4:36 am

in event source list, this alert is not displaying "FailoverClustering" see the screenshot

Don't see any image related to HostMonitor on this site.
You may send screen shot and test settings to support@ks-soft.net

Alert cannot be displayed in event source list.
Alert, action, action profiles:
http://www.ks-soft.net/hostmon.eng/index-actions.htm

Test
http://www.ks-soft.net/hostmon.eng/index-tests.htm

Event source list can be displayed when you setup NT Event Log test but this has nothing to do with some specific records in event log.
I still do not understand anything

Regards
Alex

babar.munir · Post by **babar.munir** » Tue Jul 07, 2015 7:05 am

http://tinypic.com/view.php?pic=2mcdgjm ... ZtTgflp0dQ

KS-Soft Europe · Post by **KS-Soft Europe** » Tue Jul 07, 2015 7:39 am

As I can see, you are using old Windows NT mode in NT Event log test.
Try switching to Windows Vista mode.

Quote from manual:

Compatibility
For each test item you may choose "Windows NT API" or "Windows Vista+ API" mode. If HostMonitor is started on Windows Vista, Windows 2008 or Windows 7 and target host uses one of these operational systems as well, we recommend using "Windows Vista API" mode. Otherwise you should use "Windows NT API" mode that works fine for Windows 2000, Windows XP and Windows Server 2003 as well.
Note: if you switch mode for existing test, HostMonitor will consider such modified test as new item and ignore "old" events.

Please check for details at:
http://www.ks-soft.net/hostmon.eng/mfra ... m#chkNTLog

babar.munir · Post by **babar.munir** » Tue Jul 07, 2015 9:21 pm

thanks i have tried both, but this event is still not in listed

KS-Soft Europe · Post by **KS-Soft Europe** » Wed Jul 08, 2015 6:00 am

Looks like Source should be: Microsoft-Windows-FailOverClustering
We've found similar Source names, that are displayed by Windows Event Viewer as <SourceName>,
while real rource name (discribed in MS manuals and provided by Windows API) is Microsoft-Windows-<SourceName>

babar.munir · Post by **babar.munir** » Wed Jul 08, 2015 10:26 pm

thanx alot yes it is Microsoft-Windows-FailOverClustering

KS-Soft Europe · Post by **KS-Soft Europe** » Thu Jul 09, 2015 12:59 am

You are welcome!

babar.munir · Post by **babar.munir** » Mon Jul 13, 2015 3:57 am

the Micorsoft-windows-failoverclustering is displaying in the list when i select compatibility mode "Use windows NT API (Supported by windows 2000, XP and widnows 2003 as well) but this did not solve my problem because i did not receive any alert today which i had configured for this event..what i assume the reason is that this event is "critical" and this key word is missing in this compatibility mode.

as i change compatibility mode to use windows vista+API, "critical" key word is listed in the Event level, but when i try to select event source, it gives me an error.. any solution to this ?

http://tinypic.com/view.php?pic=jkzy2d&s=8#.VaOKq_lp0dQ

KS-Soft Europe · Post by **KS-Soft Europe** » Mon Jul 13, 2015 4:36 am

As I can see, you haven't specified "Connect as" option.
Do you use Connection Manager for that host?
Please make sure "NT Event Log" test method is marked for that host in Connection Manager or specify "Connect as" user credentials.

babar.munir · Post by **babar.munir** » Tue Jul 14, 2015 10:03 pm

i am not using connection manager

i have also tried with connect as option by providing the user credentials but issue still persists..

i am not sure if it is issue with windows 2012R2 server ..

KS-Soft · Post by **KS-Soft** » Wed Jul 15, 2015 10:23 am

We cannot reproduce the problem.

Question 1 - Why screen shot shows events dated July 04? NT Event Log test does not detect OLD events, only events recorded after you setup test.
So if you setup test correctly on 09 Jul 2015 04:26 (date of your post - Microsoft-Windows-FailOverClustering) then it will detect events recorded after 09 Jul 2015 04:26. It will not detect events recorded on July 04.

Questions 2- Why screen shot shows event source "fai"?
You should type correct event source name.

Could you please send test settings, screen shot of recent events in event log, screen shot of recent test status to support@ks-soft.net?
"recent events" and "recent test status" means - test performed at 2:00pm, event added 2:05pm, test executed 2:10pm (just for examples).

i am not using connection manager

You should use either Connection Manager or "Connect as" test property.

Regards
Alex

babar.munir · Post by **babar.munir** » Wed Jul 15, 2015 10:36 pm

Question 1 - Why screen shot shows events dated July 04? NT Event Log test does not detect OLD events, only events recorded after you setup test.
So if you setup test correctly on 09 Jul 2015 04:26 (date of your post - Microsoft-Windows-FailOverClustering) then it will detect events recorded after 09 Jul 2015 04:26. It will not detect events recorded on July 04.

this event is continuously occurring in event log since last 2 month. and couple of days ago it also occurs.. so it should be detected..

Questions 2- Why screen shot shows event source "fai"?
You should type correct event source name.

i was looking failoverclustering event so i typed "fai" to check in the list if this event exists or not.. but as pointed correctly by KS-Soft Europe, the entry was Microst-windows-Failoverclustering

Could you please send test settings, screen shot of recent events in event log, screen shot of recent test status to support@ks-soft.net?
"recent events" and "recent test status" means - test performed at 2:00pm, event added 2:05pm, test executed 2:10pm (just for examples).

sure i will

You should use either Connection Manager or "Connect as" test property.

i am now using connect as property after pointed out by ks-soft Europe last post.