Page 1 of 1

Eventlog monitoring with WMI Plus plugin

Posted: Fri Nov 15, 2019 3:31 am
by rajudvsn
Hi Everyone,

We are using WMI Plugin to Monitor our Windows Servers CPU, Memory, Disk Usage etc.. however, we have a requirement to monitor Windows Event logs also with the same WMI plus plugin. There is a mode in this plugin called checkeventlog which allows to define the log type (like System, Application etc.) however, it seems it does not allow us to define filter like Event ID, Source etc.. to create Eventlog monitoring.

Has anyone found a way to use WMI Plus plugin to monitor Eventlog for a specific event ID and for a specific event source?
For example: i want to monitor System log with source as EventLog and Event ID as 6009 and for Error event logs. Is this possible with checkeventlog of WMI Plus plugin?

Best Regards

Re: Eventlog monitoring with WMI Plus plugin

Posted: Fri Nov 15, 2019 4:19 pm
by mbellerue
There is a check_wmi_plus.ini file that defines the functionality with check_wmi.plus.pl. If you can create a WMI query that checks the EventLog in the way you need it to, maybe we could get it into the ini file. Are you familiar with querying the EventLog with WMI?