Submit a ticketCall us

AnnouncementsTHWACKcamp 2018 is here

2018 is the seventh year for THWACKcamp™, and once again we’ll be live October 17 – 18 with packed session tracks covering everything from network monitoring and management, to change control, application management, storage, cloud and DevOps, security, automation, virtualization, mapping, logging, and more.

Register for online sessions.

Home > Success Center > Server & Application Monitor (SAM) > SAM - Knowledgebase Articles > Monitor the Application and Service logs

Monitor the Application and Service logs

Table of contents
Created by Chris Foley, last modified by MindTouch on Jun 23, 2016

Views: 3,004 Votes: 2 Revisions: 7

Overview

This article explains how to monitor Event Log entries that appear in the Applications and Services Logs section seen in Event Viewer, using the Windows Event Log Monitor.

Environment

  • Windows Vista and later
  • SAM 5.5 and later (RPC fetching added to Windows Event Log Monitor)

Steps

  1. Add or Edit a Windows Event Log Monitor.
  2. Within the Monitor, set the Fetching Method to RPC (Remote Procedure Call). This should be done as the Application and Service logs are not available in the WMI.
  3. Set the Log to Monitor to  Custom.
  4. Set the Custom Log to Monitor value to the path that leads to the Event Log you wish to monitor.

For example: If you wish to monitor the Task Scheduler logs, set the Log to Monitor to Microsoft-Windows-TaskScheduler/Operational.

  5.  Set the remainder of the criteria as needed.

 

Last modified

Tags

Classifications

Public