When adding an event sensor to a Windows server, it lists the event logs that are on the server including custom event logs that have been added like Internet Explorer.

When I try to add anevent sensor for a WinXP machine it only list the 3 main logs not any of the added logs.

Anyway to get it to pickup the additional log files?

Article Comments

Attention: This article is a record of a conversation with the Paessler support team. The information in this conversation is not updated to preserve the historical record. As a result, some of the information or recommendations in this conversation might be out of date.

Not tested with Windows XP, but you could try the Exe/Script sensor for Windows events. Let me know if it worked for you :)


Dec, 2014 - Permalink

I found it. On XP and others I guess it does not always create all entries for en event log.

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog I created my own log file key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\MyEventLog

I was missing a couple of keys, not sure which one fixed it.

AutoBackupLogFiles MaxSize

After I added those 2 keys and then PRTG saw the log file.

FYI you have to reboot when making changes to the event logs, you cannot stop/start the event log service.

After adding the log file you can create your own events using eventcreate.


Dec, 2014 - Permalink