In this example we will setup a filter that will notify us when a backup event is not written to the event log between 8PM and 5AM in the morning from Tuesday to Saturday. Windows backup logs an informational event to the Microsoft-Windows-Backup event log with event id 4 and the event source "Microsoft-Windows-Backup".
1. Creating the recurring event filter
Create a new package or add a new filter to an existing package with general settings as shown in the screen shot below:
Then, configure the recurring event options by clicking on the Hour/Day tab and duplicating the screenshot settings shown below:
The pushed buttons represent the hours between which the event should occur, and the schedule type needs to be set to Recurring Event. If the event configured in the General tab of the filter does not appear in the event log at the specified time, then EventSentry will log an Error to the Application event log with the event id of 10620. Please see Recurring Event Filters in the manual for additional information.
|
If you don't have a Catch-All filter in place that forwards errors from the event logs to you, then you will need to add a 2nd filter to this or another assigned package that will forward the error (LOG=Application;Source=EventSentry;ID=10620) logged by EventSentry to you. |
