Event Log Monitoring 1

[dennisbeach1]

I am looking for a simple product that can check specific servers for specific event IDs and send an SNMP or E-mail message, when the specified events occur on the server. I have seen products that do this and all kinds of other things. These are to costly and have to much overhead. Just a simple event alerting tool is all we want.

 

[jnicks]

How Frequently?

Real time is expensive.

Once every three hours or daily is not.

 

[dennisbeach1]

3 or 4 times per day would be okay. These events normal start occuring long before the related failure occurs.

 

[deadeyes81]

What type of servers are you using? If you're using Compaq use their "Insight" Manager. You can probably get what you are looking for.

 

[jnicks]

DeadEyes81 -- Good answer. If it is built in then avoid aftermarket (like my stuff, smile).

Once every 6 or so hours does give you the opportunity to dump a log and analyze it offline.

 

[jnicks]

It looks like ELDump could be a big part of solving this...

http://www.ibt.ku.dk/jesper/ELDump/default.htm

as it looks to be a far more useful DumpEL.

If you can dump and pre-filter what is dumped from event logs, making 6-hour or so checks is halfway home.

J

 

[OzDog]

Yes, Insight Manager is very good.

We recently bought another product for AUD$2000 per server that does all of the above - THe Argent Guardian. Download trial version @ argent.com I believe.

Seems pretty good - full SNMP, set it to check as often as you like. Pre-configured with Cisco, Compaq, HP, IBM hardware and supports NT, 2K, Unix and Linux. Can check eventlogs, uptime, hard drives, processors, network etc etc etc. Also gathers info for trend analysis which is really handy. Cheers,
Sam

Please let members know if you found their posts helpful.