SMS for reporting all client windows event logs

[JohnK]

I think I might be duplicating this question, but can I use SMS 2003 to show
me all ‘errors’ and/or ‘warnings’ in the Windows event logs (Application,
System, Security) in some type of summary report? I’ve looked at tools like
GFI and Event tracker, but I’d rather use SMS since I already have it.
Perhaps the ‘Last 1000 messages for a specific computer (Errors and
Warnings)’ report could somehow be modified to cycle through all computers in
a collection?

[Garth]

umm... There are two things here.

1) "Last 1000 message for a specific computer (Error and Warnings)" is only
SMS / ConfigMgr errors not system errors, and therefore will not give you
what you want.

2) You could import into SMS all of the Events within the Event logs using
an sms_def.mof edit, however I would not recommend it due to the sheer
volume of data. I have no idea how GFI is doing it but if you look at the
default event viewer log size of 20MB each (Vista), you can see this would
make that SMS / ConfigMgr database huge, in no time flat!

What are you trying to do?

"JohnK" <Jo...@discussions.microsoft.com> wrote in message
news:BBB71746-3B87-47C7...@microsoft.com...

[Sherry Kissinger [MVP-SMS]]

This is just my opinion of course, but it sounds like you are hoping to make
SCCM or SMS behave/work like having an Operations Manager client on your
workstations? and instead of forwarding to OpsMan, forwarding events to SMS?

Again, just my opinion; but I think these are separate tasks within the
System Center universe.

I know that super-clever people (aka Jeff Gilbert or systemcentertools.com)
have ways to pull EventVwr data and get that data into SMS; but it is a very
targetted query; specific eventids for example. Do enhansoft.com products
pull from eventvwr as well? I've never asked them.
--
Standarize. Simplify. Automate.