Read Windows Event Logs

oakfan52 · Joined: 02 Jan 2006 Posts: 25 Location: Sacramento, CA

Can cacti read windows event logs? baiscally I'd be looking to read the event logs if a specific event is logged then generate an alert.

warnesj · Cacti User Joined: 29 May 2005 Posts: 163

If you Cacti box is running Linux you may want to try winlogd (http://www.edoceo.com/products/winlogd.php) to forward Windows Event Log messages to the syslog daemon of your Cacti server. Then from there I you should be able to use the syslog plugin (http://forums.cacti.net/viewtopic.php?t=10280). But I haven't installed that plugin (yet), so I don't know if it has alerting capabilities.

BSOD2600 · Posted: Tue Dec 19, 2006 5:14 pm Post subject:

Sounds like more of a job for a cacti plugin.

cigamit · Posted: Tue Jan 02, 2007 11:51 am Post subject:

Actually, this is exactly what I use the syslog / "haloe" plugin for. We use NTSyslog on our Windows hosts to forward all messages to Syslog-NG on our Cacti server. Syslog-NG stores everything in a database which we then use the syslog plugin to view and alert on that database.

I really need to sit down and write a guide for it all, but time is scarce.