1

I'm trying to create a "Custom View" thru eventviewer on Windows 2k8R2-SP1 to see multiple logs from multiple nodes in a cluster in one view. But it doesn't seem to accept the remote computers' names by ip or by fqdn. Is there a specific way to add the computernames here.

enter image description here

None of the blogs I came across discussed adding multiple computer names in a custom view.

4
  • What exactly is your problem? It doesn't accept any computer in this field? It doesn't accept if you enter more than one computer name? It ignores the machines defined? It shows an error message - what error?
    – techraf
    Mar 8 '16 at 5:00
  • @techraf It ignores the machines defined. No errors while entering the names or editing the filter. It just doesn't get the events from the machines. You can repro in a min. Mar 8 '16 at 5:14
  • Again: you ask about "multiple machines". Does it work for you with one machine?
    – techraf
    Mar 8 '16 at 5:21
  • @techraf Yes it's working with the name of the local machine. But not with the name of a remote machine. Mar 9 '16 at 15:42
2

The custom view will only show events that are in the event viewer, you can't filter to show remote computer events unless you have connected to the remote computer (Right Click on 'Event Viewer' Select 'Connect to another computer' and enter the remote host name in the 'Another Computer' field).

If you want a central repository for all your cluster hosts you will need to configure event subscriptions. This will allow you to collect events from multiple hosts and then use the custom filter to view more than one host at a time.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.