Ipswitch WhatsUp Gold User Guide - Ipswitch Documentation Server

Ipswitch WhatsUp Gold User Guide
xxx) Adding and Editing a Windows Event Log Monitor
When assigning a Windows Event Log passive monitor to a device, make sure the device has
credentials assigned to it before creating the passive monitor. To use multiple Windows
Event Log passive monitors, assign a unique Windows Event Log passive monitor for each
device.
The upgrade process to WhatsUp Gold from previous versions automatically migrates
Windows Event Log passive monitor credentials into the Credentials Library. If you
experience upgrade problems with Windows Event Log passive monitors, look in the
Credentials Library for the Windows (WMI) credentials that work for the device. If the device
credentials do not exist, create new credentials for the device.
To add or edit a Windows Event Log monitor:
1 Click the Admin tab, then click Monitor Library. The Monitor Library dialog appears.
2 Click the Passive tab. The Passive Monitor list appears.
3 Click New and select Windows Event Log to create a new Windows Event Log monitor.
Click OK.
- or -
Select the Windows Event Log monitor you want to change from the list of current
monitors, and then click Edit.
4 Complete the information for the following fields.
Name. Type a name for the monitor. This name displays in the Passive Monitor
Library.
Description. Type a short description for the monitor. This description displays next
to the monitor in the Passive Monitor Library.
Condition. Enter a list of conditions to match. Only log entries matching these
expressions are converted to events. Conditions are processed sequentially from top
to bottom. As each condition is evaluated, its results are applied to the next condition
until all conditions are evaluated. For complex sets of conditions involving both ANDs
and ORs, this serial logic may produce different results than intended. As a best
practice, we recommend keeping conditions simple by opting for multiple Passive
Monitors over complex sets of conditions. When complex conditions are unavoidable,
we recommend grouping all OR conditions together at the beginning of the set of
conditions, followed by the ANDs.
Click Edit to add or edit a condition or Clear to remove a condition from the box.
Match On. You can click the Add button to access the expression editor (on page 166),
where you can create your expression, test it, and compare it against potential
payloads you can receive. After creating the expression, click OK to insert that string
into the Match On list.
Note: If you have multiple payload Match On expressions, they are linked by OR logic, not
AND logic. For example, if you have two expressions, one set to "AB" and the other to "BA", it
is matched against any log entry that includes either of the two strings.
5 Click OK to save changes.
242