3.8 EventLog

Use this Knowledge Script to monitor the NT event log entries created by HP SIM or SMA. These entries are in the System log. You can define other parameters for filtering the event log, such as event category, event ID, user, server name, and description.

3.8.1 Resource Objects

SIM server objects

3.8.2 Default Schedule

The default interval for this script is Every 10 minutes.

3.8.3 Setting Parameter Values

Set the following parameters as needed:

Description

How to Set It

Event?

Set to y to raise events. The default is y.

Collect data?

Set to y to collect data for charts and reports. The default is n.

Start with events in past N hours

Set this parameter to determine which events are searched the first time you run the job. The following entries are valid:

  • -1 to search all existing log entries during the first interval

  • n to search entries for the past n hours (8 for the past 8 hours, 50 for the past 50 hours, etc.)

  • 0 to search no previous entries (search from the current time forward)

The default is 0.

Monitor for events of type: Error?

Set to y if you want to monitor Error events. The default is y.

Monitor for events of type: Warning?

Set to y if you want to monitor Warning events. The default is y.

Monitor for events of type: Information?

Set to y if you want to monitor Information events. The default is n.

Filter the Event Category field for

If you are interested in events in a particular category (for example 9 or 4), specify an appropriate search string. The Knowledge Script looks for matching entries in the Event Log’s Category field. You can specify multiple strings separated by commas.

The search string can contain criteria used to include entries, exclude entries, or both. Separate the include and exclude criteria with a colon (:). If you are specifying only include criteria, the colon is not necessary.

Filter the Event ID field for

If you are interested in particular event IDs, specify an appropriate search string. The Knowledge Script looks for matching entries in the Event Log’s Event field. You can specify multiple IDs separated by commas.

The search string can contain criteria used to include entries, exclude entries, or both. Separate the include and exclude criteria with a colon (:). If you are specifying only include criteria, the colon is not necessary.

Filter the Event User field for

If you are interested in events associated with a particular user, specify an appropriate search string. The Knowledge Script looks for matching entries in the Event Log’s User field. You can specify multiple strings separated by commas.

The search string can contain criteria used to include entries, exclude entries, or both. Separate the include and exclude criteria with a colon (:). If you are specifying only include criteria, the colon is not necessary.

Filter the Event Computer field for

If you are interested in events generated by a particular computer, specify an appropriate search string. The Knowledge Script looks for matching entries in the Event Log’s Computer field. You can specify multiple strings separated by commas.

The search string can contain criteria used to include entries, exclude entries, or both. Separate the include and exclude criteria with a colon (:). If you are specifying only include criteria, the colon is not necessary.

Filter the Event Description field for

If you are interested in events with a particular detail description or containing keywords in the description, specify an appropriate search string. The Knowledge Script looks for matching entries in the Event Log’s Description field. You can specify multiple strings separated by commas.

The search string can contain criteria used to include entries, exclude entries, or both. Separate the include and exclude criteria with a colon (:). If you are specifying only include criteria, the colon is not necessary.

Maximum number of log entries per event report

Specify the maximum number of log entries to be included in each event's detail message.The script returns multiple events if it finds more entries in the log than the maximum limit you specify. The default is 30 entries.

Event severity level

Set the event severity level, from 1 to 40, to indicate the importance of the event. The default is 8.