Network Automation Software We are currently migrating this forum
over to our HelpSystems domain. Please
post all new threads in our new
HelpSystems Community Portal.
Post to the HelpSystems Forum
You are not currently logged on. You must be logged on in order to post. Log on
Or Create a new account
AutoMate Discussion
Decrease font size
Increase font size
Topic Title: Event condition not considering low level items in event log tree
Topic Summary:
Created On: 02/10/2014 10:08 AM
Status: Read Only
Linear : Threading : Single : Branch
Search Topic Search Topic
Topic Tools Topic Tools
View similar topics View similar topics
View topic in raw text format. Print this topic.
 02/10/2014 10:08 AM
User is offline View Users Profile Print this message

Author Icon
JeanDelfosse
Supreme Guru (1000+)

Posts: 8883
Joined: 03/30/2005

Event condition is OK when watching high level items like Application, System, etc
but there are many other event logs deeper as
Microsoft/Windows/Task Scheduler/Operational
which possess an evtx file named
Microsoft-Windows-TaskScheduler%4Operational.evtx
that cannot be watched by the trigger. It is impossible to reach them per the event trigger GUI.

-------------------------
Jean Delfosse - Automate Beta Tester
Win7 Pro 64 bits -Win XP Pro SP3 32 bits - AM8, AM7, BPA10, BPA9, BPA8, BPA7, AM6 Enterprise, AM4
 02/10/2014 03:42 PM
User is offline View Users Profile Print this message

Author Icon
Ricardo Castaneda
HelpSystems

Posts: 3424
Joined: 01/11/2008

Hi Jean,

Can you post a sample that we can run in house?

-------------------------

Ricardo Castaneda | Principal Support Analyst
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700
 02/10/2014 08:27 PM
User is offline View Users Profile Print this message

Author Icon
JeanDelfosse
Supreme Guru (1000+)

Posts: 8883
Joined: 03/30/2005

Ricardo,
in Windows event viewer there are many "folders" arranged in a tree. See picture
One branch of the tree is
"applications and services log" with subfolders "Microsoft", then "Windows" then many other ones.
The one I want to watch is Microsoft-Windows-TaskScheduler/Operational
See picture
In the Trigger editor GUI there is no way to specify it
The only tentative approaching (but not reaching) it is as Log = "System" under which can be found "Microsoft-Windows-TaskScheduler" but NOT "Operational"
See picture

It is quite easy for you to test that trigger since in this log there are plenty of events like automatic updates of the system and applications.

V10 behavior is exactly the same as v9, which does not work either.


-------------------------
Jean Delfosse - Automate Beta Tester
Win7 Pro 64 bits -Win XP Pro SP3 32 bits - AM8, AM7, BPA10, BPA9, BPA8, BPA7, AM6 Enterprise, AM4
 03/17/2014 01:16 PM
User is offline View Users Profile Print this message

Author Icon
Ricardo Castaneda
HelpSystems

Posts: 3424
Joined: 01/11/2008

Hi Jean,

Would it be possible to test this issue on Beta 3?

-------------------------

Ricardo Castaneda | Principal Support Analyst
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700
Statistics
18258 users are registered to the AutoMate Discussion forum.
There are currently 0 users logged in.
The most users ever online was 5551 on 01/08/2018 at 11:11 AM.
There are currently 2140 guests browsing this forum, which makes a total of 2140 users using this forum.

FuseTalk Enterprise Edition v4.0 - © 1999-2020 FuseTalk Inc. All rights reserved.

Sitemap Network Automation Software Blog