XADM: Event Scan Tool Only Reports Application Log Events (185007)


The information in this article applies to:

  • Microsoft Exchange Server 4.0
  • Microsoft Exchange Server 5.0
  • Microsoft Exchange Server 5.5
This article was previously published under Q185007

SUMMARY

The Event Scan utility, included in the Microsoft BackOffice Resource Kit, can be used to monitor specific events and notify a user by e-mail or a network message window to specific computers. The Event Scan utility only monitors the Windows NT Event Viewer Application Log.

This behavior is by design.

MORE INFORMATION

If the configuration file contain Event IDs or Sources that are generated in the Security or System log, the event will not be logged and the specified action, alert, or mailing will not occur.

Sample .cfg file with Event and Source in Security Log

   ;Format is EventID;Source;action;Alert list;mail list;comment string

   531;Security;;johndoe;johndoe;Failed Login Attempt
   528;Security;;johndoe;johndoe;Good Login
   538;Security;;johndoe;johndoe;Good Login

Sample Screen Output

   Checking event log for server SERVER1 at: 9:01:35 AM
   Reported 0 events for server SERVER1.
   Sleeping for 300 seconds...
   Checking event log for server SERVER1 at: 9:05:35 AM
   Reported 0 events for server SERVER1.
   Sleeping for 300 seconds...
   Checking event log for server SERVER1 at: 9:10:35 AM
   Reported 0 events for server SERVER1.
   Sleeping for 300 seconds...
   Checking event log for server SERVER1 at: 9:15:35 AM
   Reported 0 events for server SERVER1.
   Sleeping for 300 seconds...

Sample .cfg file with Event and Source in Application Log

   1016;MSExchangeIS Private;;;;user logged onto store

Sample Screen Output

   Checking event log for server SERVER1 at: 9:01:35 AM
   Reported 0 events for server SERVER1.
   Sleeping for 300 seconds...
   Checking event log for server SERVER1 at: 9:06:35 AM

      user logged onto store

      user logged onto store
Modification Type:MinorLast Reviewed:4/28/2005
Keywords:kbinfo KB185007
©2004 Microsoft Corporation. All rights reserved.