Product manual

62| Configuring monitor functions Manual
Screenshot 57 - Event log check parameters dialog
It can also look for specific patterns in the description of an event as well as notify the system
administrator if one of the events occurred within a specific period of time (e.g. You can check
if a message from your antivirus software has been posted in the Application Event Log during
the last 30 minutes. An Event Log function requires the following parameters:
» Query the following event Log – Select the log File to be checked, from the dropdown
list. Available logs include „Application‟, „Security‟, „System‟, or server-related log (like
DNS, Exchange, etc).
» This check will fail when … – Specify whether this check will fail when an event having
the specified properties is found or vice versa.
» Event ID – Specify an event ID. GFI Network Server Monitor will filter events that match
the specified ID (i.e. filter events by ID).
» Event Type – Enable the event types that will be filtered and checked from the event logs
(i.e. filter events by type e.g. enable „Warning‟ to check and filter warning logs only).
» Event Source – Specify event sources that must be filtered from the logs (i.e. filter events
by source).
» Event Category – Specify event categories that must be filtered from the log (i.e. filter
events by category).
» User – Specify the name of the user whose events are to be filtered (i.e. filter events by
user).
» Description contains string – Specify the string to search for, in the file contents (i.e.
filter event by content string).
» Check only events which happened in the last x minutes – Specify this value to filter
events occurring during the specified period of time (i.e. filter events by time of
occurrence).