KB185007 - XADM: Event Scan Tool Only Reports Application Log Events

MORE INFORMATION

If the configuration file contain Event IDs or Sources that are generated in the Security or System log, the event will not be logged and the specified action, alert, or mailing will not occur.

Sample .cfg file with Event and Source in Security Log

   ;Format is EventID;Source;action;Alert list;mail list;comment string

   531;Security;;johndoe;johndoe;Failed Login Attempt
   528;Security;;johndoe;johndoe;Good Login
   538;Security;;johndoe;johndoe;Good Login

Sample Screen Output

   Checking event log for server SERVER1 at: 9:01:35 AM
   Reported 0 events for server SERVER1.
   Sleeping for 300 seconds...
   Checking event log for server SERVER1 at: 9:05:35 AM
   Reported 0 events for server SERVER1.
   Sleeping for 300 seconds...
   Checking event log for server SERVER1 at: 9:10:35 AM
   Reported 0 events for server SERVER1.
   Sleeping for 300 seconds...
   Checking event log for server SERVER1 at: 9:15:35 AM
   Reported 0 events for server SERVER1.
   Sleeping for 300 seconds...

Sample .cfg file with Event and Source in Application Log

   1016;MSExchangeIS Private;;;;user logged onto store

Sample Screen Output

   Checking event log for server SERVER1 at: 9:01:35 AM
   Reported 0 events for server SERVER1.
   Sleeping for 300 seconds...
   Checking event log for server SERVER1 at: 9:06:35 AM

      user logged onto store

      user logged onto store

XADM: Event Scan Tool Only Reports Application Log Events

SUMMARY

MORE INFORMATION

Sample .cfg file with Event and Source in Security Log

Sample Screen Output

Sample .cfg file with Event and Source in Application Log

Sample Screen Output