Can it monitor my lab's computers on all their details on a daily basis?

0 votes
asked Oct 1, 2017 in EventSentry by Davis8988 (120 points)


I want to monitor my computers on a daily basis to see if details were changed by someone over the day. 

Can EventSentry be used for monitoring lab computers on daily basis and track changes in their details?

details like: : computerName, ip, mac-address, switch-name , disk usage etc..

1 Answer

0 votes
answered Oct 1, 2017 by Ingmar (6,590 points)

You would only be able to detect changes to the the computer name and IP address (assuming the IP address is static) by monitoring the respective registry value/keys which would be changed when a host name or static IP change. There is no built-in feature in EventSentry that would detect a hostname or IP address change.

In regards to the MAC address, how would somebody change that? That should only be possible if the network card driver (and hardware) support this, which is not usually the case - especially with Windows. Either way however, this is only something you would be able to detect with our server-side ARP Daemon component:

Disk usage and other health metrics are of course tracked by EventSentry, including:

  • Services / Drivers added or removed
  • Software installed or removed
  • Tasks (Windows Scheduled Tasks) added or removed

Additionally you can also write your own scripts and integrate them with EventSentry, at that point you would be able to monitor just about anything.

I'm not sure exactly what you mean by the switch-name however - you would want to know if the name of a switch changes?

Welcome to EventSentry Q&A, where you can ask questions and receive answers from other members of the community.