For the creation of Event ID type alerts, Monitorpack does not use
a remote connection in this case but simply provides the parameters of a known Event ID that you wish to monitor.
Microsoft security prerequisites must be completed
Open Monitorpack Guard > Create alerts > Select Monitoring Event > Select or add values [ Save ] button. once complete click on [ Create ] and select your alarm type, you can get an alarm when the event ID is present in the event viewer of the remote server or if the event ID does not exist by selecting o Exists or o Doesn't exist option.
Provided that all fields are correctly configured, you can create the alert by clicking on [ Create ] select the type of alarm (mail, log, SQL, ticket)
You can view these information in xml view of your Event Viewer for any event ID.
ID | Event Level to select in Guard | XML value in Event Viewer | Level in Event Viewer | Keywords |
1 | SuccessAudit | 0 | Information | |
2 | FailureAudit | 0 | Information | |
3 | Error | 1 | Critical | |
4 | Error | 2 | Error | |
6 | Warning | 3 | Warning | |
7 | Information | 4 | Informatio. |