Event Alerter

Event Log Explorer can automatically monitor new events in event log view and alert you when a specific event occurs. This helps you to get informed about a problem right after it happen.

To open Event Alerts window, select Advanced->Event Alerter from the main menu.

You can add/change alert rule using Add/Change buttons.

Clone button clones current event rule.

Save button saves alerts to a file.

Load button loads previously saved alerts.

Test Events scans all events in the active event log view and alerts if an event matches one of the alert rules.

Alert pattern dialog

Alert pattern dialog lets you edit alert rule.

Event source and Event ID define the pattern - the condition on which the rule will be applied.

Action defines the action to start when the condition matches the event.

Run a program indicates the program name and its command line parameters to start as alert action.

Available parameters box lists the event details you can pass as command line parameters to the program. Double click in the list copies the parameter into Run a program box.

Example:

You can set Event Log Explorer to send email using blat (or similar) program. Blat is an open-source free software available at http://sourceforge.net/projects/blat/files/

Let's say you want to monitor Application event 26214, source: Chkdsk (Checkdisk run).

Event source: Chkdsk.

Event ID: 26214.

Action:

C:\Utils\blat\blat.exe -to "John Doe" -subject "Event Alert" -f john@server.com -server server.com -u john -pw password -body " Checkdisk event! Logname: [LogName]; Time: [TimeStamp]; EventId: [EventIDNorm]; User: [UserName]; Computer: [Computer] "

Whenever this event appears, you will get email:

Checkdisk event! Logname: Application on STORM , Time: 3/1/2012 4:06:09 PM; EventId: 26214; User: N/A; Computer: STORM

Notes:

Event Alerter tests new events only when event view is refreshing. So you should either enable autorefresh using View->Auto-refresh or schedule refresh using Scheduler.

When you enable Event Alerter, you will automatically activate option Only new events after refresh. This guarantees that only new events will be tested and you will not get recurring alerts on the same event.

© 2005-2013 FSPro Labs. All rights reserved.