"Event log" usually refers to the system/server logs on Microsoft Windows machines.

learn more… | top users | synonyms

5
votes
6answers
24k views

Windows Event Log - email notification

Is there an easy way to send an email when a particular severity of event from a particular service hits the Windows server event log? This is on Windows Server 2003, if it makes a difference. n.b. ...
12
votes
6answers
6k views

Server 2008 email on Event variables

One of the new features of Server 2008 is the ability to attach a task to a specific event in the event logs. One of the actions available is to send an email through a SMTP server. This is working ...
7
votes
3answers
10k views

Windows Event Log Rotation?

Windows Server 2003. Is there any way to easily rotate event logs (or automatically clear and save)? I'm doing a bit of auditing on this machine and my security log gets real big real quick and ...
5
votes
8answers
40k views

How to tell what time a domain user logged in?

In the "Security" event log on a Windows 2003 domain controller, I see several entries of event 540 -- "Successful Network Logon" averaging a few minutes apart throughout the day. Is the first one of ...
7
votes
5answers
27k views

How can I remove specific events from the event log in Windows Server 2008?

Do I need a third party tool for this?
2
votes
2answers
4k views

Tracking who installed Software on server

Am I correct, that if a program is installed on a Server and shows up in the 'Add Remove/Program programs', then it must have been installed when a user has logged onto the server either at the ...
10
votes
5answers
13k views

How do I passively monitor the Windows Event Log?

How can I monitor the Windows Event Log remotely such that I will be informed automatically when certain events occur? There are plenty of active monitoring solutions, but they require human ...
6
votes
2answers
17k views

How to diagnose a 500 Internal Server Error on IIS 7.5 when nothing is written to the event log?

I've just deployed an update to an existing ASP.NET MVC3 site (it was already configured) and I'm getting the IIS blue screen of death stating HTTP Error 500.0 - Internal Server Error The page ...
6
votes
6answers
2k views

Windows Event Log Forwarding

I am currently prototyping a setup, in which a Windows Server 2008 is configured as a central logging instance for Windows XP and Windows 7 clients via source initiated event forwarding. All computers ...
4
votes
1answer
7k views

Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9}

I'm in the middle of a "swing" migration from Windows SBS 2003 to Server 2003 Standard. It's going okay so far but we're getting event 1058 on client machines: Windows cannot access the file gpt.ini ...
2
votes
2answers
2k views

Listing Users using RDP

Windows Server 2008 R2 I'm trying to use PowerShell to get me a list of users who have logged into Remote Desktop Services (formerly known as Terminal Services) during the past day. With little ...
1
vote
1answer
811 views

Event Id:8003 The Master Browser Error

I receive the following error on Windows Server 2008 the last a few days. event id 8003 The master browser has received a server announcement from the computer computername that believes that ...
7
votes
1answer
544 views

Unexpected results from an XML query filter for security event log

Folks, I am trying to craft a custom XML / Xpath filter to the Windows Event Log viewer to exclude the countless "SYSTEM" Logons from the security log's view. I have managed to get this far with the ...
3
votes
3answers
450 views

Event Logging for RAID fault in 2008 R2

does anyone have a solution for logging an error/critical entry to the event log in 2008 R2 when RAID has an issue? I really want to set up email alerts for when this happens. I'm using the MS builtin ...
2
votes
1answer
147 views

Windows Forward Events Missing User Data and Description

I have Subscription Events set to forward windows server 2008's Terminal Services/LocalSessionManager/Operational logs to another window's server 2008's Forward Events section. The Subscription Event ...
1
vote
2answers
422 views

A lot of logon/logoffs events in Windows event log

I have a server that contains Team Foundation Server which we use for source control. This server is windows server 2003, however it is not our domain server. When we do a large 'get latest version' ...
0
votes
2answers
236 views

Determine windows server attack? Should I monitor the server and block IPs all the day?

While Viewing the windows server 2008 event log, I always find many security events 4625/logon as follows: **An account failed to log on.** Subject: Security ID: SYSTEM Account Name: ...
0
votes
2answers
322 views

creating Event Viewer Applications and Services Logs

On my server I want to create custom logs for different applications. How is this done as a server administration exercise?
0
votes
1answer
842 views

How to write proper XPath query for filtering certain application pool errors in Windows 2008 R2 Event log (“Applications” section)

does someone know how to write proper XPath query for filtering certain application pool errors in Windows 2008 R2 Event log ("Applications" section)? EventData in XML view from Application eventlog ...
0
votes
1answer
437 views

Windows: Audit/View logins from remote networks?

i want to audit remote connection attempts to a Windows 2003 Server. i've changed the group policy to show logon successes and failures: >gpedit.msc Local Computer Policy Computer ...