forked from bloomberg/collectdwin
-
Notifications
You must be signed in to change notification settings - Fork 2
Read Windows Events Plugin
andrewpaine edited this page Nov 4, 2015
·
3 revisions
This plugin reads from the windows event logs of the server. It is specifically intended for use with the Write Netuitive plugin and other write plugins do not process the values it collects.
Events can be configured in the ReadWindowsEvents section of the configuration:
<ReadWindowsEvents>
<Events>
<Event Log="System" Source="Service Control Manager" MaxLevel="WARN" />
<Event Log="System" Source="Service Control Manager" MaxLevel="INFO" FilterExp="^(?!The WMI)" />
<Event Log="Application" Source="" MaxLevel="WARN"/>
</Events>
</ReadWindowsEvents>
Any number of entries can be added.
Value | Description |
---|---|
Log | (Required) The windows log (e.g., Application, System, Security) |
Source | (Required) The source of the event (this is the source field in event viewer). Can be left blank for any source. |
MaxLevel | (Required) The maximum log level to collect. In ascending order these are CRITICAL, ERROR, WARN, INFO and DEBUG |
FilterExp | (Optional) A regular expression applied to the log message. Messages that don't match are disregarded |