Windows Event Viewer Notifications through SIM 5.0?

[JeffW_1]

Is it possible to have SIM agents notify the CMS server upon Windows Event Viewer events? If so, can you further filter which of these events (warnings or errors) would cause a CMS event notification to be sent?

I would expect this is possible but haven't found any documentation for configuring this in the Install & User guide. Any information would be very much appreciated, thanks all!

[Steve Kadish · Accepted solution]

Hi Jeff,

There is no built-in capability for this, with the exception of the "application exception" trap which can be turned on through the HP Management Agents control panel.

There are utilities available from Microsoft to convert Windows events into SNMP traps (Evt2trap, I think one is called), but they require you to configure traps for *specific* events. I.e., if you want a trap for, say, every error, the utility is useless.

You probably want to look at something which is specifically designed for Windows events, such as Snare.

Good luck,
- Steve

[Pagnotta]

Hi,

have been able to find anything about this kind of system ?

I'm trying to do exactly the same stuff. Ive alos open a new thread to discuss that point

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=975325

Angelo