RSA Admin

Windows Application logs for MSSQL

Discussion created by RSA Admin Employee on Feb 18, 2011
Latest reply on Feb 24, 2011 by RSA Admin

I have added several Windows systems to enVision. They double as SQL Servers and information that I am analyzing is in the Windows application log.  The data is visible on the Event viewer panel under the Analysis tab.  The message id is Application_18456_MSSQL....   The device is only set as a windows (NIC) device.  When I try to create an alert and I choose an event id the application message is not available.  Do I need to make the device a multi device and manually add it as a Microsoft SQL Database device in order to select the message id's?

Outcomes