I think I set mine up to alert if > 0 and it worked for me.

 

C:\eventchk\checkevt.pl XXX.XXX.XXX.XXX:system:5:1:*:*:id:571

 

XXX.XXX.XXX.XXX is the IP address of the server I am checking.

 

I am checking for event 571 with in the last 5 minutes

 

Rob

 

-----Original Message-----
From: Ahmed Hassan [mailto:[EMAIL PROTECTED]
Sent:
Friday, September 26, 2003 10:48 AM
To: Salive
Subject: [SA-list] Event Log Check

 

It appear may I am missing something regarding the use of Checkevt ( the event log check application).  I want to get an alert when the event ID1006 in the last 30mins - but I dont get any alert even though the specified event had occurred. I have set the error-level to 1.

 

Please see below my criteria;

 

d:\perl\bin\perl.exe  d:\apps\server\external\checkevt.pl -a SUMSVR1:system:30:1:*:*:id:1006


Want to chat instantly with your online friends? Get the FREE Yahoo! Messenger

Reply via email to