Event Log Explorer Help Prev Page Prev Page
Using Event Log Explorer (Basics)
Opening Event Log
Opening Event Log Files
Viewing Event Logs
Viewing Event Properties
Sending Event Log to Printer
Event Log Explorer Concept
Computers Tree
Log Views
Advanced use
Filtering events in Event Log Explorer
Pre-filtering events (log loading options)
XML Query Filter
General Filter
Quick Filter
Linked event filter
Bookmarking events
Exporting Event Logs
Backing up Event Logs
Save Event Log As File
Automatic Event Log Backup
Backup batch
Add Computers Wizard
Log properties
Credential manager
Credentials conflict
Analytical reports
Event Alerter
Custom columns
Computer properties
Color coding
Task scheduler
Direct access to files
Working with database
Command line options
Log View Defaults
Log Loading Options
Log files
User interface elements
Main menu and toolbar
Event Log View
Event list
Control toolbar
Description box
Event list context menu
Computers Tree
Add Computer to Tree
Add Group to Tree
Remove Computer or Group
Sorting Items in Tree
Computers tree context menu
Filter/Search Window
XML Query window
Linked Event filter window
Select computer dialog
Description server
Peer-to-peer network issues
Event log backup utility
Event Log Database Export utility
License Agreement

Event Alerter

Event Log Explorer can automatically monitor new events in event log view and alert you when a specific event occurs. This helps you to get informed about a problem right after it happen.

To open Event Alerts window, select Advanced->Event Alerter from the main menu.

You can add/change alert rule using Add/Change buttons.

Clone button clones current event rule.

Save button saves alerts to a file.

Load button loads previously saved alerts.

Test Events scans all events in the active event log view and alerts if an event matches one of the alert rules.


Alert pattern dialog

Alert pattern dialog lets you edit alert rule.

Event source and Event ID define the pattern - the condition on which the rule will be applied.

Action defines the action to start when the condition matches the event.

Run a program indicates the program name and its command line parameters to start as alert action.

Available parameters box lists the event details you can pass as command line parameters to the program. Double click in the list copies the parameter into Run a program box.



You can set Event Log Explorer to send email using blat (or similar) program. Blat is an open-source free software available at http://sourceforge.net/projects/blat/files/

Let's say you want to monitor Application event 26214, source: Chkdsk (Checkdisk run).

Event source: Chkdsk.

Event ID: 26214.


C:\Utils\blat\blat.exe -to "John Doe" -subject "Event Alert" -f john@server.com -server server.com -u john -pw password -body " Checkdisk event! Logname: [LogName]; Time: [TimeStamp]; EventId: [EventIDNorm]; User: [UserName]; Computer: [Computer] "


Whenever this event appears, you will get email:

Checkdisk event! Logname: Application on STORM , Time: 3/1/2012 4:06:09 PM; EventId: 26214; User: N/A; Computer: STORM



Event Alerter tests new events only when event view is refreshing. So you should either enable autorefresh using View->Auto-refresh or schedule refresh using Scheduler.

When you enable Event Alerter, you will automatically activate option Only new events after refresh. This guarantees that only new events will be tested and you will not get recurring alerts on the same event.


© 2005-2019 FSPro Labs. All rights reserved.

Converted from CHM to HTML with chm2web Pro 2.85 (unicode)