640 reputation
26
bio website eventlogblog.com
location Evanston, IL
age 37
visits member for 2 years, 1 month
seen Jun 13 at 17:26
stats profile views 32

May
28
answered Determining VM doing I/O on a Hyper-V host
May
22
comment What's this odd logon failure I see every day?
Have you checked your scheduled tasks yet? Logon type 4 is a batch logon, and most likely coming from a scheduled task (the fact it happens at the same time would also indicate that it's some sort of job). Can you post the complete event here, such as event id and any other relevant information?
May
21
answered Remote disk monitoring with WMI without admin rights
May
21
comment Remote disk monitoring with WMI without admin rights
Glad I could help, will do that now.
May
16
awarded  Yearling
May
14
comment Remote disk monitoring with WMI without admin rights
Have you checked the ACL on the root of the drive?
Apr
18
comment How can I monitor memory usage for a windows-based JVM and trigger an alert if it gets too high?
This is definitely possible, but I'd like to point out here that setting up performance counter alerts/triggers is somewhat crude, since it will trigger an alert as soon as that threshold is met, even if it just met for 10 seconds. This may work somewhat well for counters that do not change often (like memory usage), but would not work very well for more volatile counters like CPU usage. Monitoring solutions like EventSentry are a bit smarter, and let you configure the time period over which the threshold has to exceed a limit before they trigger an alert. This helps reduce false positives.
Apr
18
comment Task Scheduler just decides it doesn't want to run a task anymore
I think when Tamerz says "it", he means Windows, that is, the code that Microsoft employees wrote. I don't think he's trying to imply that the computer is self-aware, as you seem to keep suggesting. Trusting his analysis, I'd assume there is a bug, and I don't think your comments about Terminator were particularly helpful.
Apr
15
comment Event Logging for RAID fault in 2008 R2
I've written a blog article since then which outlines, step-by-step, how to go about this. eventlogblog.com/blog/2012/02/….
Apr
12
answered Windows service restart source
Apr
12
comment Clean up event log by script
Just out of curiosity - why would you want to do this? You can just set the logs to overwrite themselves.
Mar
21
comment Task Scheduler just decides it doesn't want to run a task anymore
Sounds to me he was just trying to find out if other people are running into the same issue he is. Not sure if thermite is going to help him solve the issue.
Mar
11
comment Opening Windows NT evt files
Just FYI, this article explains the reason behind the "The description ... cannot be found": eventlogblog.com/blog/2008/04/…
Feb
19
answered Monitoring tool which does not average data over time
Feb
13
answered Event ID 2013 (Disk Is At Or Near Capacity) not getting logged
Dec
6
comment How can I determine whether an Antivirus product is installed?
It's not available on Windows 7 unfortunately
Oct
15
comment How to monitor the size of files in Windows folder?
Thanks for clarifying. It should be easy to adapt one of our existing scripts to check for that as well and issue an alert accordingly.
Oct
12
answered Permissions needed to read event log messages remotely?
Oct
12
comment Permissions needed to read event log messages remotely?
@Ansgar doesn't seem to know what he's talking about in this case. You have clearly identified that this is a permissions issue.
Oct
10
answered How to monitor the size of files in Windows folder?