Event Log monitoring

[Brad Gravesen]

Anyone have any decent suggestions for an Event Log monitoring system. I'm
looking for something to manage about 30 servers. I'm not really budgeted
for MOM or NetIQ App Manager, not to mention it's probably overkill. I'm
looking for something that can let me view the systems event log data in a
web page and allow me to setup rules and alerts. Preferably with a MSSQL
backend.

Thanks,
Brad

[Joe Richards [MVP]]

hostmon might be able to help out...

www.ks-soft.com

--
Joe Richards
www.joeware.net

--

"Brad Gravesen" <bgra...@yvcc.edu> wrote in message news:%23YVSTYj...@tk2msftngp13.phx.gbl...

[Karl Levinson [x y] mvp]

www.ipsentry.com is one solution, starting around $100 US. It is
inexpensive, has a lot of options for alerting you and monitors a lot of
other things besides event logs as well. For example, it can alert you if
things happen that don't generate an event log entry, such as the server or
a service on it stops responding. And it's a little smart in that you can
set up alerts in a hierarchy, so that if a router stops responding to ping,
your pager or email won't get thousands of alerts when all the dozens of
services you're monitoring on the hundreds of servers behind that router
appear to stop responding. Similarly, you can configure it to alert you
when a server doesn't respond three times, and then wait four hours before
contacting a backup or someone above you. But if you want the data in a SQL
server to do datamining and searching, It may not be it's your best option.

Or you could use a free NT syslog utility similar to NTSyslog [there are at
least one or two others as well] to get the event log entries into the SQL
server. Or you could just use free log extraction utilities like the free
command line utility from www.sysinternals.com and then set up scripts to
port those text files into SQL somehow.

"Brad Gravesen" <bgra...@yvcc.edu> wrote in message

news:#YVSTYj1...@tk2msftngp13.phx.gbl...

[John Losey]

Depending on what sort of collection you're looking for, you can also use
EventCombMT.exe, it is downloadable as part of the Account Lockout
Management Tools via:
http://www.microsoft.com/downloads/details.aspx?FamilyID=7af2e69c-91f3-4e63-8629-b999adde0b9e&DisplayLang=en

It will let you setup queries that can capture specific events from multiple
servers at once.

John

"Brad Gravesen" <bgra...@yvcc.edu> wrote in message

news:%23YVSTYj...@tk2msftngp13.phx.gbl...

[BradB]

EventSentry - Freeware depending on how many filters you want, etc, etc

http://www.netikus.net

"Brad Gravesen" <bgra...@yvcc.edu> wrote in message
news:%23YVSTYj...@tk2msftngp13.phx.gbl...