log Event Description

[dkurfurst]

Hello
I am trying to figure a way to get the description of an event log to be logged to a text file. I want to check the current version of Mcafee Engine and DAT file (virus Signature). It is being logged in the application event log under Source:McLogEvent, Type:Information, Event ID:5000. the info that I need ether logged or written to a file is what appears in the Description box.
Idealy this would be written as a CSV, html or plain text.

Whats the best way to accomplish this?
Thanks
Don

[KS-Soft]

Use NT Event Log test and either "Execute external program" or "Record HM Log" actions or simple Private Log.
Please read the manual or visit our web site:
NT Event Log test
http://www.ks-soft.net/hostmon.eng/mfra ... m#chkNTLog
Actions
http://www.ks-soft.net/hostmon.eng/mfra ... htm#actLog
http://www.ks-soft.net/hostmon.eng/mfra ... htm#actPrg
Logging
===============
Use private log
Additionally, for each test you can define its own, dedicated log file by checking the "Use private log" option. The type of a private log is determined based on the file extension: HTML for .htm*, DBF for .dbf, plain text for any other extension.
Private logs can be configured to work in one of the following modes:
- Default - the Primary log settings defined in the Options dialog are used;
- Brief - record information whenever status of the test changes;
- Full - record all test results, regardless of whether their status had changed or not;
- Reply - record information into log every time the status or reply value of the test changes.
If a private log is specified, the popup menu for that test will contain the item, "View private log". For more information about different logging options, please, refer to Log&Reports section of this documentation.
===============

Regards
Alex

[dkurfurst]

So I tried what you suggested by setting up a private log but I dont see the event Description that contains the information i need to parse. How do I get the Event "description" information to be displayed?

[KS-Soft]

Does HostMonitor change test status when "bad" event detected?
Then may be you have disabled "Show event description in Reply field" option? Option located on Misc page in HostMonitor Options dialog.

Regards
Alex

[dkurfurst]

OK, I saw that the check box was not checked next to "Show event description in Reply field" st it and re-ran the test and looked at the "private log" file and still dont see the description. I made the change from the RCC Console, does that make a difference?

[KS-Soft Europe]

OK, I saw that the check box was not checked next to "Show event description in Reply field" st it and re-ran the test and looked at the "private log" file and still dont see the description.

What is test Status and Reply fields ?
What logging mode is selected for "Use Private log" option: Default, Brief, Full, Reply ?

I made the change from the RCC Console, does that make a difference?

You may change it using RCC or HostMonitor. If you are not sure if changes applied, please recheck them.

[dkurfurst]

test status says BAD, Reply says 0ms
I tried setting the private log to full and also Reply with no luck
Checked the options > misc > NT Event log option and made sure check box is still ticked off...
???

[KS-Soft]

Sounds like you are using "Reverse alert" option so HostMonitor sets Bad status when no event detected.
If I am wrong, please provide detailed information about your system:
- Windows
- Service Pack
- HostMonitor version
- Test settings (you may export test item settings into test file and send to us by e-mail)

Regards
Alex

[dkurfurst]

Alex
I did notice that I had "Reverse Alert" checked off, once i unchecked it, it gave the expected results.
Thank You!