When adding an event sensor to a Windows server, it lists the event logs that are on the server including custom event logs that have been added like Internet Explorer.

When I try to add anevent sensor for a WinXP machine it only list the 3 main logs not any of the added logs.

Anyway to get it to pickup the additional log files?

Article Comments

Not tested with Windows XP, but you could try the Exe/Script sensor for Windows events. Let me know if it worked for you :)


Dec, 2014 - Permalink

I found it. On XP and others I guess it does not always create all entries for en event log.

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog I created my own log file key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\MyEventLog

I was missing a couple of keys, not sure which one fixed it.

AutoBackupLogFiles MaxSize

After I added those 2 keys and then PRTG saw the log file.

FYI you have to reboot when making changes to the event logs, you cannot stop/start the event log service.

After adding the log file you can create your own events using eventcreate.


Dec, 2014 - Permalink