In this example we will configure EventSentry to send an email alert if Notepad.exe runs for longer than two minutes. If the process terminates before the twominute mark the process termination filter will clear the timer and prevent the alert. Prerequisites Ensure the following Advanced Audit Policies are enabled set to Success on t...
Moving EventSentry and the Web Reports: 1 Export your current EventSentry settings from the Management Console toolbar by clicking Home Export. Then transfer this file to your new server. Edit the file in a text editor such as Notepad and do CTRLH find and replace and enter this as the Find value: name of your old ...
The EventSentry Agent is designed to use a minimal amount of CPU usage as not to affect the performance of the monitored host in any way. Under normal circumstance the average CPU utilization of the CPU should be 1. Certain features and environmental conditions can however temporarily spike the CPU usage. High Event Log Activity Eve...
Starting with v4.0 the management console will display a warning tile One or more EventSentry crash dumps were found click for more instructions in the welcome dialog when one or more crash dumps have been found. When an EventSentry component encounters an unexpected error it may generate an application fault and terminate resulting in ...
Using EventSentry in conjunction with WEF has not been tested and is not a supported setup. Instead EventSentry agents should be deployed and used to transfer event log and other data through the collector. Utilizing the EventSentry collector services offers a number of benefits including: Caching data while a host is offline Encryptio...
If an EventSentry service is very busy when you run an update sometimes Windows can fail to stop the service during install and the update fails. This most commonly happens with the EventSentry Collector or the EventSentry Network Service but it can happen with other EventSentry services as well. If this happens you can update those failed se...
There are several compliance standards that EventSentry can help fulfill such as: PCIDSS 3.x FISMA HIPAA Sarbanes Oxley SOX GLBA ISO 27001:2013 CJIS Security Policy SB1386 California NIST 800171 For more information please see: https://www.eventsentry.com/features/compliance
For the eventsentryweb account: In the web reports menu click Settings and choose Profiles and type the new eventsentryweb password in the settings and click Test Connection. If the test is successful you can save the changes by scrolling to the bottom and clicking Submit. Repeat this for any additional web reports profiles that use the sa...
This is caused by a missing Windows update. If Windows has not been recently updated or if you39ve been installing nothing but SecurityOnly updates and SecurityOnly rollups you might be missing a required dll file. Either update your system so that you have at least one of the monthly update rollups which were released since January 2018 o...
Preliminary testing suggests that these errors are caused by the July 2018 Windows Updates. There are several networking problems and service stability problems that Microsoft has acknowledged as being caused by these updates and these networking problems may affect the EventSentry server39s TCP connections in particular the EventSentry Heartb...
Please review Requirements in the official EventSentry documentation. EventSentry: Operating System: Windows Server OS Windows 2012 R2 or higher CPU: 4 or more cores Memory RAM: 4 GB minimum / 16 GB total system recommended
Yes depending on how aggressive your Antivirus/Antimalware software is you may be unable to deploy the agent or push an updated configuration without whitelisting. If you experience the error Unable to update files or Unable to update files despite having Administrator permission on the remote host you may need to whitelist the followi...
The Software/Hardware Inventory system health package can monitor battery levels both on laptops and directly attached UPS devices. Alerts generated by this feature can be used that to generate an email when the percentage is low. By default there is a System Health Inventory Software/Hardware Monitoring package if you don39t...
Generally speaking EventSentry does not have a significant performance impact on a computer. EventSentry was developed in C with the goal of being invisible in mind and we are happy to say that we have accomplished this goal. As such one should never even notice that the agent is running and monitoring the event logs and the computer. The E...
Yes as long as the necessary WMI interface Dell OpenManage HP Insight WBEM is installed in the operating system the EventSentry agent can detect and monitor the same RAID status fan status power supply status and other hardware health and status indicators that are visible in the vendor39s hardware status tools. EventSentry can also dete...
The EVENTSENTRYSVC.LOG file located in the SYSTEMROOT directory usually c:\winnt or c:\windows is the debug log file of the EventSentry agent. To reduce the size of this file set the Debug Level option in Service Control to None or Low and restart the EventSentry service. The contents of this file are always cleared when the serv...
During the initial installation of EventSentry the installer performs a disk speed test to estimate if your disk subsystem will be able to run the EventSentry database and other services smoothly. This is using a tool that comes included with Windows called winsat. You can run this test manually yourself by opening a command line window as an ...
Yes there is an EventSentry mobile application but it is published by a 3rd party. iPhone/IPad/Apple Watch EventMonitor Androidbased devices Sorry there is no Android application for EventSentry.
On my Windows Server 2003 with service pack 1 SP1 I am unable to start the EventSentry Service Agent and the EventSentry management console also won39t load.All EventSentryrelated applications seem to fault crash either immediately or a short while after they were started. All EventSentry executable files eventsentrysvc.exe eventsentr...
You can download the package file from our website from a computer that does have an Internet connection and then copy the package file to the computer where the EventSentry Management Console is installed. The URL for the package file is: Latest EventSentry Packages There currently is no builtin notification mechanism available to let you kn...
Yes We have three desktop backgrounds/wallpapers in blue gray and orange each with a 3840x2160 resolution available for download. Each background also comes in two different variations. resource 10
Yes please navigate to https://www.eventsentry.com/support/documentation to download the help file and/or quickstart guide. Both documents are available in the following formats: Microsoft Help.chm Adobe PDF.pdf HTML.htm Multimedia Help.exe
Service Account EventSentry agent LocalSystem account EventSentry Collector LocalSystem account EventSentry Heartbeat Monitor Please see KB41 EventSentry Network Services LocalSystem account EventSentry Web Reports LocalSystem account EventSentry Database Netwo...
Yes in fact we have a tutorial on our blog that shows how to execute a command based on the IP value in certain Logon Failure events. Please note that you can use a different event39s data to get the IP address value for your script or command. You can use the Event Message Browser to determine the insertion string number of the IP address...
A new licensing engine was introduced in EventSentry v3.1 and license keys issued for EventSentry v3.0 or earlier those license keys are usually 56 characters in length will no longer work in EventSentry v3.1 and later. You can migrate your legacy license keys to the new v3.1 license keys under two circumstances: 1. You have an active maint...