Monitoring Windows Event Logs

Question

Monitoring Windows Event Logs

Orlando Colamatteo

SSC Guru

Points: 182279
More actions
January 10, 2012 at 2:44 pm

#253139

I am curious about which tools people are using to monitor Windows Event Logs on servers hosting SQL Server.
There are no special teachers of virtue, because virtue is taught by the whole community.
--Plato

Viewing 10 posts - 1 through 9 (of 9 total)

You must be logged in to reply to this topic. Login to reply

Orlando Colamatteo SSC Guru Points: 182279 More actions · Answer 1

Wow, 20 thread views and not one poll reply or comment? Is everyone ignoring the Windows Event Log entries on their SQL Servers?

There are no special teachers of virtue, because virtue is taught by the whole community.
--Plato

Chuck Hottle SSCarpal Tunnel Points: 4777 More actions · Answer 2

I used a VBScript and WMI in my last job. Responsibiities are more segregated where I am now and that would be an IT function. They use SCOM, but I'm not sure how much event log monitoring it has available.

george sibbald SSC Guru Points: 104210 More actions · Answer 3

SCOM

---------------------------------------------------------------------

azdzn SSCarpal Tunnel Points: 4128 More actions · Answer 4

azdzn

SSCarpal Tunnel

Points: 4128

January 12, 2012 at 1:54 am

#1432290

SCOM

vultar Hall of Fame Points: 3271 More actions · Answer 5

We've got a powershell script to collect this info.

peterdru401 Mr or Mrs. 500 Points: 535 More actions · Answer 6

Lepide Event Log Manager am currently using.... the tool provides a simplified platform to centrally archive, consolidate and monitor network-wide Windows and W3C event logs

arnipetursson SSCertifiable Points: 6557 More actions · Answer 7

Nagios - SCOM as secondary. We had issues with SCOM, e.g. slowness, missing things and downtime.

arnipetursson SSCertifiable Points: 6557 More actions · Answer 8

Sorry, that was my old role.

In my new role we use PRTG.

Orlando Colamatteo SSC Guru Points: 182279 More actions · Answer 9

Thanks for all the replies!

I appreciate the insight into what others are doing. I think I would prefer to use SCOM but it's not available in the current shop unfortunately. I settled on LogParser.exe which can pull Event Logs directly into a SQL Server database table. I do the necessary inspection on the table and email a report of interesting events from a stored proc which I call after calling LogParser.exe. All of the steps are tied together by a PowerShell script which is scheduled to run nightly. It's a homegrown solution to be sure, but I built the PowerShell script to read a set of servers from a text file so it scales out nicely for this environment where there are lots of servers and some are coming online others are going offline on a regular basis.

There are no special teachers of virtue, because virtue is taught by the whole community.
--Plato