Skip to content

Read Windows Events Plugin

andrewpaine edited this page Nov 4, 2015 · 3 revisions

Read Windows Events plugin

This plugin reads from the windows event logs of the server. It is specifically intended for use with the Write Netuitive plugin and other write plugins do not process the values it collects.

Events can be configured in the ReadWindowsEvents section of the configuration:

<ReadWindowsEvents>
  <Events>
    <Event Log="System" Source="Service Control Manager" MaxLevel="WARN" />
    <Event Log="System" Source="Service Control Manager" MaxLevel="INFO" FilterExp="^(?!The WMI)" />
    <Event Log="Application" Source="" MaxLevel="WARN"/>
  </Events>
</ReadWindowsEvents>

Any number of entries can be added.

Value Description
Log (Required) The windows log (e.g., Application, System, Security)
Source (Required) The source of the event (this is the source field in event viewer). Can be left blank for any source.
MaxLevel (Required) The maximum log level to collect. In ascending order these are CRITICAL, ERROR, WARN, INFO and DEBUG
FilterExp (Optional) A regular expression applied to the log message. Messages that don't match are disregarded