Sampa @ Work

This is going to be a very dense introduction to application log monitoring. I'm going to have subsequent posts that cover parts of this in more depth. Application log monitoring refers to reading log files on the local computer and processing the entries...

This works for an alert generating rule. This is an example for a generic CSV rule generated through the UI using "Create a New Rule" using "Alert Generating Rules" -> "Event Based" -> "Generic CSV Text Log (Alert)" Here is a line from the log file...

The System.PropertyBagData data type is used by several modules. A partial list of the modules is below. Microsoft.Windows.LdapProbe Microsoft.Windows.Win32ServiceInformationProbe Microsoft.Windows.DependentNTServiceStateProbe Microsoft.Windows.WmiEventProvider...

There are a number of modules that provide information about windows services. Microsoft.Windows.ExistingWin32ServiceInformationProvider Microsoft.Windows.Win32ServiceInformationProvider Microsoft.Windows.ExistingWin32ServiceInformationProbe Microsoft...

Event 1102 is logged to the security event log when the security event log is cleared. This event differs from most events in the security event log in that the event source is “Microsoft-Windows-Eventlog”, not “Microsoft-Windows-Security-Auditing”. By...

My name is Sam Patton. I'm a developer on System Center Operations Manager 2007 at Microsoft. My main area are the WMI modules, the LDAP modules, and the mapping modules. My goal in writing this blog is to give people a better understanding of the internal...