2011-02-18
03:42 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Windows Application logs for MSSQL
I have added several Windows systems to enVision. They double as SQL Servers and information that I am analyzing is in the Windows application log. The data is visible on the Event viewer panel under the Analysis tab. The message id is Application_18456_MSSQL.... The device is only set as a windows (NIC) device. When I try to create an alert and I choose an event id the application message is not available. Do I need to make the device a multi device and manually add it as a Microsoft SQL Database device in order to select the message id's?
3 Replies
2011-02-21
11:31 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
The events in the application log are windows events...however I am not sure that the are parsed. Have you tried message ID rather than eventid? Are you on content 2.0? If so, you have to check under referenceID instead of eventID. Also, check the message with a query to see how they parse
2011-02-24
08:32 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
So, I have done some testing and if I set the device to a Multi Device and I manually add it as a MS SQL server then indeed I now see the MSSQL Application log entries. I am not sure if this is how it's suppose to work but it works... Gar y
2011-02-24
09:27 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Yes...that is how it is supposed to work...just take a look at the MSSQL device XML and you will see the messages defined there
