[xymon] Windows Event logs monitor added to Xymonton

[TJ Yang]

Thanks, David
I added your report as a bug here
https://sourceforge.net/tracker/?func=detail&aid=3047417&group_id=136450&atid=735923

tj
On Tue, Aug 17, 2010 at 6:23 PM, David Baldwin
<david.baldwin at ausport.gov.au> wrote:
> TJ Yang wrote:
>> On Tue, Aug 17, 2010 at 4:09 AM, David Baldwin
>> <david.baldwin at ausport.gov.au> wrote:
>>
>>> This is my solution for the deficiencies of both BBNT's msgs and BBwin
>>> (broken in central mode) windows event log reporting.
>>>
>>
>> I am preparing to deploy BBWin 0.12 at work.
>>
>> Would you please elaborate more how BBWin central mode msgs reporting
>> is broken ?
>>
> The ignore filtering and size limiting has no effect. I currently have
> the following in /etc/hobbit/client-local.cfg - doesn't do anything useful.
>
> [win32]
> log:eventlog_security:10240
> ignore .*
> ignore .
> msgs:eventlog_security:10240
> ignore .*
> ignore .
> eventlog:security:10240
> ignore Windows Filter
> ignore handle
> ignore .*
> ignore .
> eventlog:System:10240
> ignore .*
> ignore .
> eventlog:application:10240
> ignore .*
> ignore .
>
> I also have success and failure auditing turned on - which means the
> event log reports can be very big. Too big for hobbitd to handle even
> with MAXMSG_DATA set at values like 15242880 (i.e. 15MB), so I get
> "flooding" client errors.
>
> Also, the event log subsystem has changed in Vista and Server 2008.
> Neither BBNT or BBWin seems to handle event log processing properly for
> these.
>
> Thanks, David.
>
> --
> David Baldwin - IT Unit
> Australian Sports Commission          www.ausport.gov.au
> Tel 02 62147830 Fax 02 62141830       PO Box 176 Belconnen ACT 2616
> david.baldwin at ausport.gov.au          Leverrier Street Bruce ACT 2617
>
>
> -------------------------------------------------------------------------------------
> Keep up to date with what's happening in Australian sport visit http://www.ausport.gov.au
>
> This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender.
> -------------------------------------------------------------------------------------
>
> To unsubscribe from the xymon list, send an e-mail to
> xymon-unsubscribe at xymon.com
>
>
>



-- 
T.J. Yang