Create a Windows Event Log Monitor report

Overview

This article aims to help build a report that will provide the matches for one or more matches for a Windows Event Log Monitor.

Environment

• Server & Application 3.5 and later


• Pre-configured Windows Event Log Monitors (see Monitor Windows events in Orion APM)

Steps

1. Go to Settings > Manage Report.

2. Click Create New Report.

3. Select Custom Table and click SELECT AND CONTINUE.

4. Select Advanced DataBase Query (SQL, SWQL).

5. Select SQL and paste the following query:

select * from dbo.apm_windowsEvent_Detail where ComponentID IN ('{ComponentID','ComponentID') AND DATEDIFF(day,TimeGeneratedUTC,getdate()) <31

Note: Replace ComponentID with the internal ID(s) of the Windows Event Log Monitor(s) you wish to report on.  To find the ID, simply open the Monitor's Details Page and note the number at the end of the URL in your Web Browser's address bar.

6. Click ADD TO LAYOUT.

7. Click Add Column.

8. Select all of the columns and click ADD COLUMN.

9. Modify as needed and click SUBMIT.

10. Give the Report a title and click Next

11. Continue clicking Next until the wizard is complete.

RELATED ARTICLES

• Create an alert that is triggered when flow data is lost


• Monitor NTP drift for Windows servers


• Unable to open the Server service performance object


• Creating a Windows PowerShell monitor


• Polling engine keeps restarting and services status shows as Running

solarwinds windows event log, solarwinds windows event log forwarder, solarwinds windows event log monitor
Source: http://docphy.com/technology/computers/software/create-windows-event-log-monitor-report.html