Can I decide which events or warnings go to the event log?

[beansontoast]

Hi Everyone,

Not sure if this is 100% the right area but here goes.

I am basically wanting to strictly control the errors and warning which are written to the event log.
In turn we are then using SCOM to hook into the event log, parse the error strings and hey presto we have a centralized 'dashboard' reporting on all of our trapped error conditions.

The issue I am having, is that I can only see how top turn on errors, warnings or information etc etc.

What I really want is a way of using the 'nteventlog' but only for selected errors.

Happy to use nteventlog or a receiver, but I can't quite see how I can customise this.

If anyone has any experience of this, can you please advise.

Thanks

 

[marclant]

Hi,

You cannot decide which message, but you can decide which type of messages:
- ALL
- Info
- Warning
- Error
- Severe

Typically, when people want alerts on specific errors, that's handled by the monitoring tool in question to parse the logs and determine what is to be displayed and ignored.

If you use the TSM Operation Center (also a dashboard), then you can configure it to alert on specific messages in the Operation Center by defining alerttrigger. http://ibm.co/1nQ89QB