Some events that are processed by EventSentry are not formatted correctly even though they show up correctly with the builtin Windows Event Viewer. This seems to affect mostly events that are generated by Windows itself e.g. DNS Windows Backup etc. Those events seem to only contain parts of the event most strings and descriptions are miss...
Most of the event logs contained under the Microsoft folder in the Applications and Services Logs section of the Event Viewer can be monitored using the Custom Event Logs feature in EventSentry. To monitor these event logs you will need to specify the full path to the event log. You can obtain the path by viewing any event using the Win...
EventSentry has the ability to email a user or users when they have been logged into a server for a set time limit. For example a server or group of servers have an RDP connection limit and users should be reminded to log off when they are done. EventSentry can send email reminders to those users when they have been logged in for a certain am...
On hosts where the computer name exceeds the NetBIOS maximum of 15 characters some events may be logged to the event log with the truncated NetBIOScompatible name. Since EventSentry does not modify event log entries for a variety of reasons it is likely that you will see duplicate host names in the computer dropdown box of the event s...
Windows generates an event ID 4688https://system32.eventsentry.com/security/event/4688 in the Windows Security Event Log when a process gets launched. In EventSentry an include filter that monitors for those events needs to be created and associated with an email action so that an email alert is sent once this specific process gets starte...
Filters are an essential part of EventSentry which allow you to configure a set of actions to activate whenever an event occurs. For example you can setup a filter to forward events to a database or in case of emergency send an email or SMS message to your phone. A filter can either be an include filter and forward events to a configured ac...
A standard EventSentry event log filter will forward the configured event to the configured action every time the event occurs. Alternatively a filter threshold will limit a filter to only perform the configured action if it meets a certain limit. AgentSide/CollectorSide This dropdown in the general settings of the threshold ta...
A Recurring Event filter is useful in situations where you would like to take an action when an event does not occur. A common use case for this is a successful backup job. Most backup software will write an event to the event log when it completes successfully. If this event is not generated then we know something went wrong with the b...
A summary event log filter allows for events to be collected over a period of time rather than sending you an alert or performing an action immediately. You can turn any Event Log filter to a summary event filter by clicking the Hour/Day tab and setting the schedule type to Summary. If an event occurs during the specified...
An include or exclude event log filter can be created from any event log using the builtin Event Log Viewer in the EventSentry management console. This is a quick and easy way to generate event log filters that match an event and they can then be tweaked as needed. Getting Started First find the event you wish to make a filter for. ...
The initial install of EventSentry includes several default packages that match common scenarios our customers face. For example when an error is detected on a hard disk most administrators would like to receive an alert. However there may be some events that are a bit more specific to your network that you would like to receive. If you are mo...
Filter Timers give you the ability to ignore events if they are followed by a specific second event within a set time period. For example you probably want to be notified when a server goes offline for more than 5 minutes but it might be OK if the server comes back online after 2 minutes. Another example where a filter timer would be useful...
