Knowledge Base




You can be notified when a remote web site certificate is about to expire using checkurl.exe from EventSentry SysAdmin Tools. For that we are going to: 1. Install EventSentry SysAdmin tools to user checkurl.exe feature. 2. Create an User Embedded Scrip 3. Create an application schedule to run the script on certain schedule. 4. Creating ...

KB-ID 431
Category: Network Monitoring
Applies to: 4.1 and later

The EventSentry Network Services service has the following prerequisites: Licensing While the Syslog and SNMP daemon functionality is included with EventSentry at no extra charge you will need to have at least a 10host Network Device or evaluation license installed. Visual C Runtime The Microsoft Visual C 2008 Redistributable ...

KB-ID 190
Category: Network Monitoring
Applies to: 2.92

Starting with version 2.92 EventSentry can receive SNMP traps with the EventSentry Network Services service. This service includes a Syslog as well as Snmp daemon processing incoming Syslog messages and/or Snmp traps. Incoming messages can either be logged to the event log and/or the EventSentry database. This service will also be availa...

KB-ID 191
Category: Network Monitoring
Applies to: 2.92

Yes you can monitor Cisco devices as well as network devices from other vendors in a variety of ways with EventSentry. SNMP Alerts Traps You can configure your Cisco device to send SNMP traps to EventSentry using EventSentry39s network services component. For instructions please click here. SNMP Polling By default EventSentry can...

KB-ID 199
Category: Network Monitoring
Applies to: 3.0.1 and higher

Please perform the following troubleshooting steps if incoming Syslog messages and/or SNMP traps are not showing up in the application event log and/or EventSentry database. Verify that: 1. the syslog and/or snmp feature are both configured to accept messages from all hosts to rule out any configuration issues navigate to Network Services ...

KB-ID 229
Category: Network Monitoring
Applies to: 2.92 and later

Starting with version 3.0 performance counters can now also be configured to retrieve information via SNMP. With new installations the Performance System system health package is already preconfigured to include both Windows performance counter information as well as SNMP OIDs for most counters. If you are upgrading from version 2.93...

KB-ID 251
Category: Network Monitoring
Applies to: All Versions

The Syslog daemon rsyslog on Ubuntu is configured through the /etc/rsyslog.d/50default.conf configuration file. Follow the steps below to send all Syslog messages from an Ubuntu machine to EventSentry. Open the file /etc/rsyslog.d/50default.conf in an editor. Append the following line to the bottom: text . eventsentryserv...

KB-ID 260
Category: Network Monitoring
Applies to: All Versions

EventSentry includes the Network Utilization sometimes labeled Network Bandwidth performance object which is located under Packages System Health Performance System Performance / SNMP. This counter measures the percentage of total bandwidth currently being consumed on the interface. On Windows it is calculated by dividing the Netw...

KB-ID 284
Category: Network Monitoring
Applies to: 3.2 and later

Prerequisites The printer or MFD device must support SNMPget sometimes referred to as SNMP polling and must be able to accept incoming requests on UDP port 161. If your printer or copier does not meet this criteria then you won39t be able to monitor it. 1 Log onto the admin interface of your printer or copier and enable SNMP and confi...

KB-ID 430
Category: Network Monitoring
Applies to: 3.0 and newer

Yes please navigate to https://www.eventsentry.com/support/documentation to download the help file and/or quickstart guide. Both documents are available in the following formats: Microsoft Help.chm Adobe PDF.pdf HTML.htm Multimedia Help.exe

KB-ID 4
Category: General
Applies to: All Versions

Yes it is recommended that you uninstall EventSentry Light with the setup application prior to installing the trial or full version of EventSentry. You will not need to uninstall the agents service from remote machines simply use Remote Update to update the agents on the remote machines once you have installed the trial version.

KB-ID 5
Category: Installation

If you use the builtin Postgres database you may need to optimize it: https://www.eventsentry.com/kb/232 If you use Microsoft SQL as your database you may need to optimize it: https://www.eventsentry.com/kb/35 If the recommended optimizations do not help please contact our support department for more indepth assistance. If you have a...

KB-ID 6
Category: Web Reports
Applies to: All

This error reported by Windows usually appears when Client for Microsoft Networks and/or NetBIOS are not installed on the management workstation and target machines for example when using Novell software. You will need to make sure that the Client for Microsoft Networks is installed when using remote update to install agents on remote...

KB-ID 8
Category: Installation

The EVENTSENTRYSVC.LOG file located in the SYSTEMROOT directory usually c:\winnt or c:\windows is the debug log file of the EventSentry agent. To reduce the size of this file set the Debug Level option in Service Control to None or Low and restart the EventSentry service. The contents of this file are always cleared when the ...

KB-ID 7
Category: General
Applies to: up to v2.43

It is important that filters using summary notifications are NOT configured to notify All Targets. When using summary notifications make sure that one and only one target is present in the filters Targets list of the General tab.

KB-ID 9
Category: Configuration

After making configuration changes on your management workstation you will need to use the Update Configuration feature of remote update to push the updated configuration to your remote machines. Rightclick the Computers container of the group you want to update and select Update Configuration. In the next dialog make sure that the co...

KB-ID 10
Category: Configuration
Applies to: All Versions

When using ODBC targets you will need to make sure that: The System DSN referenced in the ODBC target is present on all computers writing to the database. This requirement does not apply to version 2.50 and higher which also supports connection strings. Otherwise you can use AutoAdministrator to push out DSN names to remote machines. ...

KB-ID 11
Category: Notifications

Starting with EventSentry version 2.70 you can view the native event log files usually with a .evt extension with the builtin event log viewer of EventSentry. Simply rightclick the Event Log Viewer container and select Open Log File. If you are running EventSentry v2.60 or earlier then you will need to open the event log files with th...

KB-ID 12
Category: Usage

You can export and thus backup the EventSentry configuration by selecting Export from the Home menu of the EventSentry management application. This will save the entire configuration from the registry in a .reg file. Once EventSentry is installed using the wizard on the alternate server you can select Home Import from within th...

KB-ID 13
Category: Configuration
Applies to: All Versions

Yes any user with administrative privileges can view and change the EventSentry configuration. The entire EventSentry configuration is stored on a permachine basis so it doesn39t matter which user logs on to the computer where the EventSentry management application is installed. The only settings that are store on a peruser basis are th...

KB-ID 14
Category: Configuration

No restarting the EventSentry service on any machine will have no effect on other machines since the agent only works with the local event logs. The EventSentry agent does write a few events to the local machine39s Application event log upon a service restart however.

KB-ID 15
Category: Usage

Filters are processed sequentially onebyone by the EventSentry agent. If an event matches multiple filters then every filter matching the event will send the event information to the configured target. This usually happens when more than one filter is configured to use All Targets. To avoid seeing events multiple times: Configure ...

KB-ID 16
Category: Configuration
Applies to: up to 2.60

Some AntiVirus software products e.g. McAfee starting with version 8.x block and/or intercept outgoing connections to port 25. This will interfere with the EventSentry SMTP notification target which sends emails using SMTP port 25. You will need to disable or customize the SMTP protection feature of your antivirus product to make the SMTP...

KB-ID 17
Category: Notifications

You will need to take additional configuration steps when configuring EventSentry to access resources located on different computer. By default the EventSentry agent =service runs under the LocalSystem account. This is a builtin system account that has administrative permissions on the local host but usually has no permissions on remote ...

KB-ID 18
Category: Usage

This is usually a permissions issue since the EventSentry agent is running under the LocalSystem account by default. Please click the help link below DOCID 18 for more information.

KB-ID 20
Category: Notifications