How to Adjust the Polling Interval for Application Log Monitoring (300078)

MORE INFORMATION

The default polling interval for monitoring an application log is five minutes. MOM polls for updates to the log file every five minutes, but MOM may not detect changes to the log file if the log is locked while an update is occurring.

You can modify the polling interval by creating a registry key value on the Agent computer. Configuration for monitoring the log file is done on the Agent computer, not on the computer where the log file may be generated. This registry key is not present by default. You must manually create the registry key if you want to modify the polling interval of the Application Log Monitoring component.

IIS logging pre-allocates 64-kilobyte chunks in its log files. This prevents notification of file changes when entries are written to the pre-allocated chunk. To compensate, the Application Log Provider sets a timer and polls files for changes. The time interval is not exposed in the Microsoft Management Console.

Changing the Time Interval

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To set a time interval other than the five-minute default interval, modify the settings in the registry:

1. Create the following registry key value:

   HKEY_LOCAL_MACHINE\SOFTWARE\Mission Critical Software\OnePoint\Configurations\Configuration Name\Operations\Agent\Event Providers\Application Log\GUID for the provider instance\FilePollInterval

2. Set the registry DWORD value FilePollInterval to the number of seconds that equals the time interval that you want to use.

You can identify the GUID where you should create the value by selecting a GUID and reading the description in the right pane of Registry Editor.