Microsoft KB Archive/185007

= XADM: Event Scan Tool Only Reports Application Log Events =

Article ID: 185007

Article Last Modified on 10/28/2006

-

APPLIES TO


 * Microsoft Exchange Server 4.0 Standard Edition
 * Microsoft Exchange Server 5.0 Standard Edition
 * Microsoft Exchange Server 5.5 Standard Edition

-



This article was previously published under Q185007



SUMMARY
The Event Scan utility, included in the Microsoft BackOffice Resource Kit, can be used to monitor specific events and notify a user by e-mail or a network message window to specific computers. The Event Scan utility only monitors the Windows NT Event Viewer Application Log.

This behavior is by design.



MORE INFORMATION
If the configuration file contain Event IDs or Sources that are generated in the Security or System log, the event will not be logged and the specified action, alert, or mailing will not occur.

Sample .cfg file with Event and Source in Security Log
;Format is EventID;Source;action;Alert list;mail list;comment string

531;Security;;johndoe;johndoe;Failed Login Attempt 528;Security;;johndoe;johndoe;Good Login 538;Security;;johndoe;johndoe;Good Login

Sample Screen Output
  Checking event log for server SERVER1 at: 9:01:35 AM   Reported 0 events for server SERVER1. Sleeping for 300 seconds... Checking event log for server SERVER1 at: 9:05:35 AM  Reported 0 events for server SERVER1. Sleeping for 300 seconds... Checking event log for server SERVER1 at: 9:10:35 AM  Reported 0 events for server SERVER1. Sleeping for 300 seconds... Checking event log for server SERVER1 at: 9:15:35 AM  Reported 0 events for server SERVER1. Sleeping for 300 seconds...

Sample .cfg file with Event and Source in Application Log
1016;MSExchangeIS Private;;;;user logged onto store

Sample Screen Output
  Checking event log for server SERVER1 at: 9:01:35 AM   Reported 0 events for server SERVER1. Sleeping for 300 seconds... Checking event log for server SERVER1 at: 9:06:35 AM

user logged onto store

user logged onto store

Additional query words: evtscan evtscan.exe

Keywords: kbinfo KB185007

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.