Name and Version
Windows Event Log Monitor
dynaTrace 5.x, 6.x
Import the plugin on the dynaTrace Server. For more details see Plugins
The table in the database can be created by running this SQL script or you can use the screenshot from the Design view in the table to manually enter the values. The script will create the table on a database called dynaTracePluginDB. Change this name if you desire
When setting up the monitor you need to define the following configuration properties
|EventLog||Enter which Event Log the event is in (i.e. Application, System, Security, etc).|
The search term obtained from the XML in windows event log. You can either tweak the values from the below example. Otherwise, in order to obtain the Search Term in regex format, you have to log onto the server, apply the filter (as seen in the image) and then click on the XML tab which will show you the XML of the filter. Remove everything from the filter (as seen in the image) and you'll want to make sure your Date/Time is set to greater than (">"). That way the first time the Monitor runs it will start with the records after that date and will keep track of where it left off going forward.
EXAMPLE: *[System[Provider[@Name='eventlog' or @Name='Microsoft-Windows-Eventlog'] and (EventID=6008) and TimeCreated[@SystemTime>'2014-01-13T06:00:00.000Z']]]
|SQLServer||Enter the name of you SQL Database Server where you created the dynaTracePluginDB database.|
|Username||Enter the username to connect to the database. (SQL Server Authentication)|
|Password||Enter password for username used. (SQL Server Authentication)|
Optional field that points to the ip/hostname of a smtp server which is accessible from the collector where the monitor runs.
When this field is configured, each individual event that matches the Search Term will be e-mailed in XML format.
Also, when this field is configured, the next three fields are required too.
|Mail From||Mail sender e-mail address (check with your mail Administrator for source domains which are accepted by the SMTP server above).|
|Mail To||Mail recipient(s) who should receive the event details.|
|Mail Subject||Subject header for the mails to be sent.|
|New Message||If a new event log message is found this will be the number of matched events since the last check, otherwise it will be 0|