Event Log Monitor Properties

The Event Log Monitor Properties window contains the settings for an Event Log Monitor Trigger.

Property Pages

General

Name for this trigger (optional)

Optionally, specify a descriptive name for the trigger.

Enabled

Uncheck this box to disable the trigger. If the trigger is not enabled, adTempus will ignore it (it will not cause the job to trigger).

Minimum Interval

Specify the minimum interval (in seconds) for this trigger. Once the triggers conditions are satisfied and the job is triggered, adTempus will ignore this trigger for the specified interval.

For example, suppose you are using a File Trigger to trigger the job whenever a new file is added to a folder. If you set the interval to 60 seconds, then once adTempus triggers the job, it will ignore any new files that arrive in the next 60 seconds.

Description/Notes

Enter any extended descriptive information or notes for this trigger.

Job Variables

The Job Variables page allows you to define Job Variables that will be set for this job only when it is started by this trigger.

The Job Variable list shows variables defined for the current object as well as variables inherited from a higher level. Icons next to each variable in the list convey information about their inheritance:

The variable is inherited from a higher level
The variable is inherited from a higher level and is locked (cannot be overridden)
The variable is inherited from a higher level and has been modified at this level
The variable is new at this level
The variable is inherited from a higher level and must be overridden (a value provided) at this level
The variable has been overridden (redefined) at a lower level. This icon only appears if you have analyzed variable usage (see below).

When you hove the mouse pointer over the icon for an inherited variable, adTempus will show where the variable was inherited from.

Filtering the variable list

The variable list can be filtered to:

  • Hide inherited variables (so you only see variables defined at this level)
  • Hide variables that cannot be modified (inherited variables that are locked to prevent modification)
  • Show only variables that must be overridden

Analyzing and viewing variable usage5.0

When you click Analyze variable usage, adTempus searches for all the places where the variables are used or overridden. After this analysis is complete, new columns are added to the list to show, for each variable:

  • Whether it has been overridden (redefined) at a lower level
  • A count of how many times it is referenced (used)

Clicking Show variable usage opens a new window showing all the references and overrides for the variables. This is the same window shown by the Find Variable and Function References tool.

Analyze variable usage only finds references and overrides that are "below" the current level. For example, if you are viewing the variables for a job, this will find all references and overrides within the job, or within jobs that may receive variables from this jobs (jobs run by Responses or Job Triggers). If you are viewing a group, this will find all references and overrides within groups and jobs below the selected group. That is, the tool only lists places that might be affected by changes to the variables in the list.

This tool does not show other places where the variables might be used. For example if you are viewing job A and some of the variables are also used in job B, those uses will not be listed unless there is a link between job A and job B.

To find all references to a variable:

  • If the variable is defined at the server level, use the Analyze variable usage tool from the variables list at the server level. This will show all uses everywhere in adTempus.
  • Use the Find Variable and Function References tool to find a specific variable or all variables.

Event Selection

This page defines the conditions for triggering a job. adTempus will trigger your job each time a new event is reported that meets all of the criteria you specify.

Log

Select the log to monitor. A trigger can only monitor a single log.

Sources

Select the event sources (applications) whose events you want to check. You may select any number of sources; if you do not select any source, all sources will be considered.

For example, you might want to trigger based on Error messages logged by a particular application in the Application log. Or you might want to trigger any time an Error message is logged in the System log.

Category

This option is available only if you have selected a single event source. Select the category of messages you want adTempus to examine.

Types

Select the types (severities) to consider. If none are selected, all types are considered.

Include Event IDs

If you want to trigger only when specific events are logged, enter the IDs of those events here. You can specify as many events as you wish, separated by commas.

Event IDs are specific to each application (Event Source). To determine which events IDs you want to capture, consult the documentation for the application in question, or use the Windows Event Log Viewer to examine events the application has logged. The Event Log Viewer will show you the Event IDs for those events.

If you have selected multiple Event Sources, you should not specify Event IDs unless you are sure you know what you are doing (i.e., all of the sources you have selected use the same Event IDs to mean the same thing).

Exclude Event IDs

If you want to ignore certain events, enter the IDs of those events here. You can specify as many events as you wish, separated by commas.

For example, you might want to trigger any time an event of type Error is logged by Source My Application, except if the event ID is 117.

Select events whose message matches

Check this option to select events based on the text of the event message. If the message contains the text you specify, it will be selected. The message does not have to match the specified text exactly: it may contain the specified text anywhere within it.

Use regular expressions

If this option is checked, the match text you enter is treated as a regular expression. If a match for that regular expression is found anywhere within the event message, the condition is satisfied.

Use a script to select events

adTempus will run the script you specify. Information about the event will be passed to the script using the Parameters object and through Job Variables (see list below). Your script then evaluates the event and returns True if adTempus should trigger the job, or False if it should not.

adTempus calls the script only for events that have satisfied all of the other criteria for the trigger.

Job Variables

The Event Log Monitor Trigger sets the following Job Variables, which can be used by a selection script or by other scripts or notification messages in the job.

Parameter Name Description
EventLogMonitor.EventLog The name of the log in which the event was recorded (e.g., "Application").
EventLogMonitor.EventSource The name of the event source. This is the name of the source as it appears in the Registry, and may not be the same as the name displayed in the user interface.
EventLogMonitor.EventCategory The numeric event category.
EventLogMonitor.EventCategoryName The name of the event category.
EventLogMonitor.EventType The numeric event type (severity).
EventLogMonitor.EventTypeName The event type name ("Error", "Warning", "Information")
EventLogMonitor.EventID The numeric event ID.
EventLogMonitor.EventMessage The full text of the message.
EventLogMonitor.EventTimestamp The timestamp for the message in format "yyyy-MM-dd HH:mm:ss".
EventLogMonitor.EventKeywords A comma-separated list of keywords for the event.

 

Related Concepts

Event Log Monitor Trigger