WIKI: How to Monitor Events in Devices?

Step [1]: Go to ITSM > Configuration Templates > Profiles

Step [2]: Choose profile if exist, if not exist then create a new profile then continue

Step [3]: Select ‘Monitoring’ from ‘Add Profile Section’

Step [4]: Fill the form of General tab

  • Enter name in ‘Monitoring Name’, Example: Monitor Events
  • Enter description in ‘Description’, Example:This setup monitors Events of the target computer
  • Choose any of one from ‘Trigger an alert if’
    • Select 'Any of the conditions are met' if to trigger alert when any condition become true
    • Select 'All of the conditions are met' if to trigger alert when all conditions become true
  • Type and select custom alert from ‘Use Alert Settings’ if you want to get alerted based on the existing setting otherwise leave it blank. Example: TriggerAtMonitoringEvents
    • If expected alert is not already created then create a new alert and continue
  • Select any of one from ‘Auto Remediation on alert’
    • Select 'Take no action' if you want to take no action belongs to alert
    • Select 'Run below procedure', type the script name and select the appropriate script if you want to automatically fix the alert. Example: Get Running Events

Step [5]: Select ‘Conditions’ tab

Step [6]: Select ‘Event’ from ‘Add Condition’ button

Step [7]: Fill the pop-up form loads there

  • Select Event ID or Level or Source from Parameter
  • If Event ID
    • Enter the ID value on ‘Value is equal to’. Example: 12345
  • If Level
    • Choose Level - Critical Error or Error or Warning or Information or Verbose on ‘Value is equal to’. Example: Critical Error
  • If Source
    • Enter the source value on ‘Value is equal to’. Example: wininit
  • Click ‘Create’ button
**Repeat the step 6 and step 7 to create monitor for multiple events

Step [8]: Save the monitoring

Step [9]: Go to ITSM > Devices > Device List

Step [10]: Select any Device from the list

Step [11]: Click Manage Profiles

Step [12]: Click Add Profiles

Step [13]: Choose profile created for monitoring process or processes and Save the changes. Example: Monitor Events