Events Logs

Ranman88

pts.

Tags:

DataCenter

Networking

I am a one man shop and need a way to optimize the way I look at or monitor event logs. I have a very small budget. Does anyone have a simple but effective way to get this done? Also any good ideas how to troubleshoot event logs? Any help would be deeply appreciated.

Asked: May 25, 2005 6:39 PM Last updated: May 27, 2005 7:45 AM

Answer Wiki

Last updated: May 26, 2005 7:59 AM GMT

ColinNZ0 pts.
History
Contributors
- Ordered by most recent
- ColinNZ0 pts.

Thanks. We'll let you know when a new response is added.

Have you checked out the Microsoft Scripting web site with respect to Event Logs?

http://www.microsoft.com/technet/scriptcenter/scripts/logs/default.mspx

ColinNZ

Discuss This Question: 4 Replies

Howard2nd May 26, 2005 8:00 AM GMT

You did not specify 'operating system', I will presume 'Windows". Microsoft has a free utility called 'Log Parser' (currently version 2.2). It is a steep learning curve to start. But the help file is excellent (440+ pages) and their are three different web sites providing support (prewritten scipts and explanations). Getting beyond 'Event Viewer' to find specific entries of interest is a matter of separation. Don't let the data swamp you. Good luck.

30 pointsBadges:

report
Spadasoe May 26, 2005 8:45 AM GMT

Logalot from Somix is a good event log collector. As far as troubleshooting, a good resource of info for event log events is http://www.eventid.net/

5,130 pointsBadges:

report
TheVyrys May 26, 2005 9:04 AM GMT

I'm not sure I understand exactly what you are asking, but here's a basic recommendation. You can filter your events for certain types, such as success, failure audits, errors, etc. To help trouble shoot, there is an event number or code that is associated with each event. Search the microsoft websites for these codes and they will usually help you.....usually. hope this helps.

0 pointsBadges:

report
X16wda May 27, 2005 7:45 AM GMT

Deopends on exactly what you want to do, but I'd say look at Event Sentry (www.eventsentry.com). Very inexpensive, reliable, flexible. I have it email many events to me just so i can keep up with what's happening, but it can also respond to an event in many ways.

0 pointsBadges:

report