Hello,
I've googled a few methods on how to get emailed when an event code is triggered, but as yet I've not got it working.
I need to get emailed when the print spooler stops on our Citrix server.
Log Name: System
Source: Service Control Manager
Event ID: 7036
Level Information
I have then followed this:
1) In Event viewer, find the event log you want to watch. Find the event you are looking for and right click it and choose “Attach a Task To this Event…”
2) Follow the wizard and when you get to the part about what to do, you can choose the default email option, or if you want to add some additional logic, choose to “Run a program”
3) Copy the contents of the script below to a file with a .ps1 extension and alter the script to fit your specific use case.
4) Specify c:\windows\system32\WindowsPowerShell\v1.0\powershell.exe as the name of the executable (do this even if you are using a later version of powershell)
5) Specify the path and name of the script file you created above as the parameter.
here is my script:
$event = get-eventlog -System -source "Service Control Manager" -newest
#get-help get-eventlog will show there are a handful of other options available for selecting the log entry you want.
if ($event.EntryType -eq "Error")
{
$PCName = $env:COMPUTERNAME
$EmailBody = $event.Message
$EmailFrom = "Your Return Email Address <$PCName@yourdomain.com>"
$EmailTo = "myemailaddress@mydomain.com"
$EmailSubject = "Your Event Log event was found!"
$SMTPServer = "my email server IP"
Write-host "Sending Email"
Send-MailMessage -From $EmailFrom -To $EmailTo -Subject $EmailSubject -body $EmailBody -SmtpServer $SMTPServer
}
else
{
write-host "No error found"
write-host "Here is the log entry that was inspected:"
$event
}
Then I restart the printer spooler server and can see the event code is triggered, but no email.
The task scheduler event says
Task Scheduler successfully completed task "\Event Viewer Tasks\Citrix Printer Spooler alert" , instance "{1ed8a325-8a49-47ae-bd8b-e36c7fd43793}" , action "powershell.exe" with return code 2147942401.
What could be wrong?
Thanks
Email alert when an Event ID is triggered
