That was fun.

You will need:
The NT Resource Kit
Scissors (ask your parents!)
A cookie (optional)
A command-line mailer (blat, wsendmail, what have you).

Using the at facility, schedule a regular dump of the Event Log using the
dumpel utility, then grep for the string you want.

dumpel -f c:\scratch\fred.txt -l system -m



-- 
be - MOS



Nonsense.  Space is blue and birds fly through it.  --Heisenberg


> -----Original Message-----
> From: Ken Cornetet [mailto:[EMAIL PROTECTED]]
> Sent: Friday, June 14, 2002 4:00 PM
> To: Exchange Discussions
> Subject: RE: Monitoring application for Exchange
> 
> 
> Do you have any unix/linux servers about? There is a free 
> program out there
> (name escapes me at the moment) that sends event log entries 
> to syslog on a
> unix box. On the unix side, it's pretty simple to configure 
> syslog to send
> email on receipt of given events.
> 
> If memory serves, there is also an event log reader program in the NT4
> reskit. You could use that, combined with at, findstr and 
> blat (SMTP mailer)
> to do what you want to do.
> 
> Lastly, this would be pretty simple in Perl.
> 
> If you want it written for you, send me the requirements 
> directly, and I'll
> send a quote. 
> 
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Friday, June 14, 2002 1:00 PM
> To: Exchange Discussions
> Subject: Monitoring application for Exchange
> 
> 
> Is there is a product out there that will monitor the
> application/system/security NT logs on exchange servers and 
> e-mail certain
> errors? 
> 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to