Eventsource FailoverClustering missing

All questions related to installations, configurations and maintenance of Advanced Host Monitor (including additional tools such as RMA for Windows, RMA Manager, Web Servie, RCC).
Post Reply
babar.munir
Posts: 30
Joined: Wed Jan 23, 2013 3:43 am
Contact:

Eventsource FailoverClustering missing

Post by babar.munir »

i am using 9.58 HM version, i have to generate an alert SQL failover clustering but HM is not getting FailOverClustering event viewer source.. any solution please?
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

What test method do you use?
NT Event Log?
Test settings?
Test performed by HostMonitor or Remote Monioring Agent (RMA)?
Windows?
Service Pack?

What exactly means "HM is not getting"?
What is test status?
Reply field?
Have you checked event log? Do you see NEW "FailOverClustering" events, record added after you have created HostMonitor NT Event Log test?

Regards
Alex
babar.munir
Posts: 30
Joined: Wed Jan 23, 2013 3:43 am
Contact:

Post by babar.munir »

KS-Soft wrote:What test method do you use?
NT Event Log?
yes
Test settings?
i have attached the image
Test performed by HostMonitor or Remote Monioring Agent (RMA)?
server is in my LAN, so alert is being performed by HM, other all test are working fine i.e ping, Drive etc except this one
Windows?
Service Pack?
windows server 2012R2
What exactly means "HM is not getting"?
in event source list, this alert is not displaying "FailoverClustering" see the screenshot
What is test status?
its "error" in event viewer of server
Have you checked event log? Do you see NEW "FailOverClustering" events, record added after you have created HostMonitor NT Event Log test?
yes as you can see in screen shot of yesterday..
Image

Regards
Alex[/quote]Image
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

in event source list, this alert is not displaying "FailoverClustering" see the screenshot
Don't see any image related to HostMonitor on this site.
You may send screen shot and test settings to support@ks-soft.net

Alert cannot be displayed in event source list.
Alert, action, action profiles:
http://www.ks-soft.net/hostmon.eng/index-actions.htm

Test
http://www.ks-soft.net/hostmon.eng/index-tests.htm

Event source list can be displayed when you setup NT Event Log test but this has nothing to do with some specific records in event log.
I still do not understand anything :oops:

Regards
Alex
KS-Soft Europe
Posts: 2832
Joined: Tue May 16, 2006 4:41 am
Contact:

Post by KS-Soft Europe »

As I can see, you are using old Windows NT mode in NT Event log test.
Try switching to Windows Vista mode.

Quote from manual:
Compatibility
For each test item you may choose "Windows NT API" or "Windows Vista+ API" mode. If HostMonitor is started on Windows Vista, Windows 2008 or Windows 7 and target host uses one of these operational systems as well, we recommend using "Windows Vista API" mode. Otherwise you should use "Windows NT API" mode that works fine for Windows 2000, Windows XP and Windows Server 2003 as well.
Note: if you switch mode for existing test, HostMonitor will consider such modified test as new item and ignore "old" events.
Please check for details at:
http://www.ks-soft.net/hostmon.eng/mfra ... m#chkNTLog
babar.munir
Posts: 30
Joined: Wed Jan 23, 2013 3:43 am
Contact:

Post by babar.munir »

thanks i have tried both, but this event is still not in listed
KS-Soft Europe
Posts: 2832
Joined: Tue May 16, 2006 4:41 am
Contact:

Post by KS-Soft Europe »

Looks like Source should be: Microsoft-Windows-FailOverClustering
We've found similar Source names, that are displayed by Windows Event Viewer as <SourceName>,
while real rource name (discribed in MS manuals and provided by Windows API) is Microsoft-Windows-<SourceName>
babar.munir
Posts: 30
Joined: Wed Jan 23, 2013 3:43 am
Contact:

Post by babar.munir »

thanx alot yes it is Microsoft-Windows-FailOverClustering
KS-Soft Europe
Posts: 2832
Joined: Tue May 16, 2006 4:41 am
Contact:

Post by KS-Soft Europe »

You are welcome!
babar.munir
Posts: 30
Joined: Wed Jan 23, 2013 3:43 am
Contact:

Post by babar.munir »

the Micorsoft-windows-failoverclustering is displaying in the list when i select compatibility mode "Use windows NT API (Supported by windows 2000, XP and widnows 2003 as well) but this did not solve my problem because i did not receive any alert today which i had configured for this event..what i assume the reason is that this event is "critical" and this key word is missing in this compatibility mode.

as i change compatibility mode to use windows vista+API, "critical" key word is listed in the Event level, but when i try to select event source, it gives me an error.. any solution to this ?

http://tinypic.com/view.php?pic=jkzy2d&s=8#.VaOKq_lp0dQ
KS-Soft Europe
Posts: 2832
Joined: Tue May 16, 2006 4:41 am
Contact:

Post by KS-Soft Europe »

As I can see, you haven't specified "Connect as" option.
Do you use Connection Manager for that host?
Please make sure "NT Event Log" test method is marked for that host in Connection Manager or specify "Connect as" user credentials.
babar.munir
Posts: 30
Joined: Wed Jan 23, 2013 3:43 am
Contact:

Post by babar.munir »

i am not using connection manager

i have also tried with connect as option by providing the user credentials but issue still persists..

i am not sure if it is issue with windows 2012R2 server ..
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

We cannot reproduce the problem.

Question 1 - Why screen shot shows events dated July 04? NT Event Log test does not detect OLD events, only events recorded after you setup test.
So if you setup test correctly on 09 Jul 2015 04:26 (date of your post - Microsoft-Windows-FailOverClustering) then it will detect events recorded after 09 Jul 2015 04:26. It will not detect events recorded on July 04.

Questions 2- Why screen shot shows event source "fai"?
You should type correct event source name.

Could you please send test settings, screen shot of recent events in event log, screen shot of recent test status to support@ks-soft.net?
"recent events" and "recent test status" means - test performed at 2:00pm, event added 2:05pm, test executed 2:10pm (just for examples).
i am not using connection manager
You should use either Connection Manager or "Connect as" test property.

Regards
Alex
babar.munir
Posts: 30
Joined: Wed Jan 23, 2013 3:43 am
Contact:

Post by babar.munir »

Question 1 - Why screen shot shows events dated July 04? NT Event Log test does not detect OLD events, only events recorded after you setup test.
So if you setup test correctly on 09 Jul 2015 04:26 (date of your post - Microsoft-Windows-FailOverClustering) then it will detect events recorded after 09 Jul 2015 04:26. It will not detect events recorded on July 04.
this event is continuously occurring in event log since last 2 month. and couple of days ago it also occurs.. so it should be detected..
Questions 2- Why screen shot shows event source "fai"?
You should type correct event source name.
i was looking failoverclustering event so i typed "fai" to check in the list if this event exists or not.. but as pointed correctly by KS-Soft Europe, the entry was Microst-windows-Failoverclustering
Could you please send test settings, screen shot of recent events in event log, screen shot of recent test status to support@ks-soft.net?
"recent events" and "recent test status" means - test performed at 2:00pm, event added 2:05pm, test executed 2:10pm (just for examples).
sure i will
You should use either Connection Manager or "Connect as" test property.
i am now using connect as property after pointed out by ks-soft Europe last post.
Post Reply