Using the Windows Event Log Action

The Windows Event Log Action uses Percent Variables to gather information about your network devices and logs messages to the Windows Event Viewer dependent on the Percent Variable results. You can select to have messages logged as error, warning, or informational messages. You can easily sort messages in the Windows Event Viewer by the source that you specify in the action.

This action is useful to use if you typically check the Windows Event Viewer for network messages, as an alternative to receiving an email or SMS alert.

To configure a Windows Event Log Action:

1. Go to the Action Library:
   • From the web interface, click GO. The GO menu appears.
   • If the WhatsUp section is not visible, click WhatsUp. The WhatsUp section of the GO menu appears.
   • Select Configure > Action Library. The Action Library appears.

     - or -

   • From the main menu bar of the console, select Configure > Action Library. The Action Library appears.
2. In the Action Library, do one of the following:
   • Click New, then select Windows Event Log.

     - or -

   • Select an existing Windows Event Log Action, then click Edit. The action properties page appears.
3. Specify or select the appropriate information in the dialog fields.
   • Specify a Name for the action as it will appear in the Action Library.
   • Specify a short Description for the action as it will appear in the Action Library.
   • Specify the Source for the messages that are logged to the Windows Event Viewer. The default source is the Ipswitch WhatsUp Log Action.
   • Specify the Event ID for the messages that are logged to the Windows Event Viewer. The default event ID is 1000, the WhatsUp engine event ID.
   • Select the Level for which messages are logged to the Windows Event Viewer. You can select either Error, Warning, or Information. The default level is Error.
   • Enter the Log Message that will display in the Windows Event Viewer. This message supports percent variables. The default log message is:
     %Device.ActiveMonitorDownNames is %Device.State on %Device.Type: %Device.HostName (%Device.Address).

     Details:

     Monitors that are down include: %Device.ActiveMonitorDownNames

     Monitors that are up include: %Device.ActiveMonitorUpNames

     Notes on this device (from device property page):

     %Device.Notes

     ----------------------------------------

     This message was logged on %System.Date at %System.Time

     Ipswitch WhatsUp Gold

   Tip: Right-click in the Log Message field to select the percent variables you would like to use in the action.

4. Click OK to save changes.