Hi all,
I would like to seek some advice on the reading of changes in DHCP leased files. I would like to monitor any leased expiry/assignment of dynamic IPs in the leased file. I have thus far been able read entries made to a text fie and throw an alert. For example, when there is a word 'failed' detected in a line of the text file, an alert will be send. I reference this from this great post:
http://blogs.technet.com/kevinholman/archive/2009/06/20/using-a-generic-text-log-rule-to-monitor-an-ascii-text-file-even-when-the-file-is-a-unc-path.aspx
However, in the case of DHCP leased file, i am not looking for alerts for a word that may appear, but rather i want to fulfill the following:
1. Log all leased entries
2. Log all expiry/renewal of leased entries
Wondering if any one can advice on this issue? Thank you.