hi there,

Iam using the custom sensor "eventlogreader" to monitor my windows server backup 2008/2011

on english servers this is working great.

but somehow on my Dutch server it wont find the application section of event viewer.

iv tryed to edit the parameters to dutch"Toepassing" for application but this does not seem to work any1 got any idea's how to solve this problem?

Thanks in advance,

Shara


Article Comments

Hi Shara,

The trick here is to get the right name of the eventlog and the eventlog source. Looking at the eventlog entry should give you some hints.

I would go for "Toepassing" as the name of the eventlog and the text that is displayed where is says "Bron:" as the name of the eventlog source.

Regards,


Mar, 2012 - Permalink

Well the problem is iv already tryed to use the term "Toepassing" as eventlog and as souch iam using Backup(this is the same in english as in dutch)

iam sure iam using the right term on each server the problem is iam getting the message that the eventlog cannot be found on the targeted PC


Mar, 2012 - Permalink

Please run the sensor from the commandline, providing the -l switch. This will produce a comma seperated list of eventlog names for the target PC.

Eventlogreader -c=mycomputer -l

Regards,


Mar, 2012 - Permalink

now iam going to ask a dump question i guess my sensor is a .exe file how can i run it from commandline?


Mar, 2012 - Permalink

Hi Share,

I was under the assumption that you were using the EventlogReader sensor downloaded from the Google Code project. Sorry for the confusion.

Regards,


Mar, 2012 - Permalink

ur not thinking wrong iam using that one but iam kinda new to the whole process of custom sensors i have tryed to figgure it out myself but iam just compleetly stuck on this matter


Mar, 2012 - Permalink

Ok, no problem, open a command (cmd) window and navigate to the location where you placed the Custom Censor.

You could copy the Custom Sensor to c:\temp for testing, open the command window and type:

cd c:\temp

Next, in your command window, type

Eventlogreader.exe -c=mycomputer -l

Where "mycomputer" is the name or IP of the computer you are targeting This should produce a comma seperated list of eventlog names from that computer.

Regards,


Mar, 2012 - Permalink

cmd gives me this Response not wellformed: "Active Directory Web Services,Toepassing,DFS Replication,Directoryservice,DNS-server,File Replication-service,Hardwaregebeurtenissen,Internet Explorer,Key Management Service,MSExchange Management,Beveiliging,Systeem,Windows PowerShell "

and if i try the sensor then it gives me the same error like before

if i put the same parameters in the sensor as i did in cmd it gives me

Response not wellformed: "Active Directory Web Services,Toepassing,DFS Replication,Directoryservice,DNS-server,File Replication-service,Hardwaregebeurtenissen,Internet Explorer,Key Management Service,MSExchange Management,Beveiliging,Systeem,Windows PowerShell "

aswell


Mar, 2012 - Permalink

Ok, so the name of your eventlog is "Toepassing"

If you contact me directly, we can do this in Dutch and exchange some screenshots.

You can find my email address at: http://code.google.com/p/prtg-addons/wiki/PTF_Custom_Sensors In the left pane under "Send an Email"

Regards,


Mar, 2012 - Permalink