Page 1 of 1

ncpa - monitor extended windows logs

Posted: Fri Aug 27, 2021 5:00 am
by veehexx
How do you get the ncpa agent to report on the extended windows logs? Specifically content within the 'Applications and Services Logs'.

Upto now we've used nrpe check_eventlog & '"file=Microsoft-Exchange-HighAvailability/Monitoring" filter=id=1011' which will monitor some specific Exchange logs, but i cannot find a way to do this in NCPA (atleast via the webUI ncpa api method).

Re: ncpa - monitor extended windows logs

Posted: Fri Aug 27, 2021 3:16 pm
by pbroste
Hello @veehexx

Thanks for reaching out, in research on this, we see that there are some plugins that you could use or the option to use a PowerShell script to send a command to your Windows to 'Get-EventLog -LogName <the_log_name>'. Here is an example of a plugin:
The option to use a PowerShell script as an example would look like this, please scroll down to Powershell example here.

Thanks,
Perry