Submit a ticketCall us

AnnouncementsCome see SolarWinds at VMUG Frankfurt

SolarWinds is delighted to attend the upcoming VMUG which will take place at Kap Europa in Frankfurt on June 19th, 2018.

See event details.

Home > Success Center > Log & Event Manager (LEM) > Logging events under Application and Services Logs

Logging events under Application and Services Logs

Table of contents
Created by Jason Dee, last modified by Tim Rush on Feb 26, 2018

Views: 2,836 Votes: 0 Revisions: 5


This article provides information if you would like to log events from any log in the Windows Application and Services Logs tree in Event Viewer.


All versions of LEM


Each individual log file in that tree technically requires its own connector in order for LEM to parse its events. Several of these logs are currently supported and you will find a connector with the same name as the log itself in your node's connectors list.


For any log that isn't currently listed, we can create a new connector if you are able to raise a case with SolarWinds Support and provide the following items:

  • Log name (this includes the name of the log, Windows application by Microsoft/vendor definition, version of the Microsoft/vendor application, and the Windows operating system version)
  • Path to the log in Event Viewer (this is the navigation path used by Event Viewer)
  • Log path to the file the events are stored in (found by right-clicking the log, going to Properties, and looking at the Log path field). Screenshots are also helpful.
  • A sample log file. (this would be a copy of the actual log file, exported/saved from Event Viewer with the "English" language option, which produces the needed meta-data of the event definitions.)
    You can send us the EVTX log (& meta-data file) located at the Log path you found above or export specific events in Event Viewer by filtering and clicking Save All Events As under the Actions pane, but be sure we have all applicable events for creating a connector that will parse all applicable events..
  • If there are any specific events desired, or additional information that you can provide, please include that.
    It helps reduce possible re-work, and improve the chances to create the connector on the first try.



Last modified