OneSight Administrator Guide

Configuring Event Log Monitors
Authentication – Specifies authentication information. These
fields can be left blank if a OneSight Data Collector or Remote
Agent is running on the system being monitored. Otherwise, the
information is required, and if omitted, can result in the
inability to find an appropriate agent for data collection. If you
are monitoring a remote system that is running Windows
2003/2008 and that does not have a Data Collector or Remote
Agent running on it, you must authenticate with a domain, not
directly with the machine.
User Name – Specifies the user name.
Domain – Specifies the domain.
Password – Specifies the password.
Note: Due to Microsoft Windows limitations, monitors that use
NetBios (Windows) Authentication must use a single
username/password combination.
Event Log – Select whether the Windows event log that is being
monitored is an Application, System, or Security event log. You
can also specify a different type of log by typing its name here.
Inactivity Sample Count – If the Event Log data source detects
that the monitored event log does not log any new information
for the number of sample counts you enter here, a sample
failure will result.
Sample Every: – Specifies how often samples are
taken for this monitor. Refer to, ―Sample Every Settings,‖ later
in this chapter for a description of these settings.
Alert Collection Mode – Select how you want alerts to be
processed.
Report Alerts as they Occur – If multiple alerts occur on the
same trigger they are all sent. Alerts with the same timestamp
as a previous alert will not be sent.
Chapter 5: Configuring Monitors 241