SCOM Log file monitor--If there is no entries for some time.

All replies

• 

  

  0

  Sign in to vote

  Hi,

  you can configure missing event id monitor with no criteria for the log file. as no criteria is set the monitor will alert if on event id is logged in log file for given time.

  regards

   

  ---

  sridhar v

  
  

  • Proposed as answer by sridhar vishwanatham Wednesday, May 8, 2013 3:15 PM
  • Edited by sridhar vishwanatham Wednesday, May 8, 2013 3:16 PM
  • Unproposed as answer by sridhar vishwanatham Wednesday, May 8, 2013 3:16 PM

  Wednesday, May 8, 2013 3:15 PM
• 

  

  0

  Sign in to vote

  I think i am not clear in the question.  i need to monitor  custom log files (not windows event logs) which having the extention .log ...and not updating any entries in the log file(needs to monitor when it is not writing in the log).

  i could see the above missing event id monitor option under "windows event", and it is not available under "Log files" option in the authoring.

  correct me if i am wrong.

  Wednesday, May 8, 2013 3:39 PM
• 

  

  0

  Sign in to vote

  Any help here Please.

  Thursday, May 9, 2013 2:34 PM
• 

  

  0

  Sign in to vote

  Hi,

  need to go for custom script base monitoring for log file updated, you can get size of log file and if it's value =0 generate alert.

  refer below link for powershell script base monitoring

  http://technet.microsoft.com/en-us/video/how-do-i-create-a-rule-and-monitor-using-a-windows-powershell-script-in-a-system-center-operations-manager-management-pack.aspx

  regards

  SV

  ---

  sridhar v

  • Proposed as answer by sridhar vishwanatham Thursday, May 9, 2013 6:26 PM
  • Marked as answer by Cloud_TS Wednesday, May 15, 2013 1:31 AM

  Thursday, May 9, 2013 6:26 PM