EventLog Test

[DJMoore]

Having difficulty making the following setup work. Never seems to report the error condition. Anyone have experience with this to know of NT Event Log acually works ?
Thanks, Don

; ------- Test #05 -------

Method = NTLog
;--- Common properties ---
Title = NTLog \harley:Eventlog
Comment = NTLog \harley:Eventlog
RelatedURL =
ScheduleMode= Regular
Schedule = Monday - Friday, 24 Hours
Interval = 60
Alerts = Message, Sound
ReverseAlert= Yes
UnknownIsBad= No
UseCommonLog= Yes
PrivLogMode = Default
;--- Test specific properties ---
Computer = \Harley
Log = Application
Source = MetaframeEvents
Username = coi
Password = coi
CheckComp = AnyFromList
CheckType = AnyFromList
CheckID = AnyFromList
CheckDescr = Any
CompList = ^M\harley^M
TypeList = Error
IDList = ^M1106^M
DescrList =
ReportMode = LastEvent

[KS-Soft]

So, status of the test always "Ok"?
Did MetaframeEvents on \Harley system record new ERROR event log messages with ID 1106 since test was created?

Regards
Alex

[DJMoore]

[DJMoore]

Yes, test always appears as OK, unless I reverse the alert and it will always appear as bad. It never following the actual errors in the server event log. I selected error 1106 since it happens often enough that I see NEW error conditions every 15 minutes or so on this server. Thanks, Don

[KS-Soft]

Could you please send screen shot of the Event Properties dialog that displays event? I mean standard Event Viewer application.

Regards
Alex

[DJMoore]

Just email you the screen shot to
line2@ks-soft.net.. Hope this was ok.
Don

[KS-Soft]

Sorry, I am stupid. I should found error right away. Mistake is in CompList = ^M\harley^M parameter. Please, remove \ from the name of computer because NT Event System doesn't use UNC format, it uses just name of the system. But do not remove \ from Computer = \Harley parameter

Regards
Alex

[DJMoore]

Your suggestion was right on track..The removal of "\" solved problem. Thanks a million for your help! Don