Analysis of your IT infrastructure

Home Downloads Enterprise Contact


knowledge base




Add an Event ID type alert

For the creation of Event ID type alerts, Monitorpack does not use a remote connection in this case but simply provides the parameters of a known Event ID that you wish to monitor.


Microsoft security prerequisites must be completed

In the Guard console

Open Monitorpack Guard > Create alerts > Select Monitoring Event > Select or add values [ Save ] button. once complete click on [ Create ] and select your alarm type, you can get an alarm when the event ID is present in the event viewer of the remote server or if the event ID does not exist by selecting o Exists or o Doesn't exist option.

Provided that all fields are correctly configured, you can create the alert by clicking on [ Create ] select the type of alarm (mail, log, SQL, ticket)

Correspondence to create an Event ID alert with Guard

You can view these information in xml view of your Event Viewer for any event ID.

ID Event Level to select in Guard XML value in Event Viewer Level in Event Viewer Keywords
1 SuccessAudit 0 Information 0x8020000000000000
2 FailureAudit 0 Information 0x8010000000000000
3 Error 1 Critical
4 Error 2 Error 0x80000000000000
6 Warning 3 Warning 0x8080000000000000
7 Information 4 Informatio. 0x8000000000000000

Video tutorial


SaaS supervision

Details for creating an alert