Windows events not forwarded to event console

General
1

Hi,
I am very new to checkmk :slight_smile:
(the raw edition)

I’ve tried to forward windows events to the EC as described in the video “Ep. 38: Monitoring Windows Event Log and Custom Log Files with Checkmk”.
I can see in the “Log Forwarding” in a hosts services that events have been forwarded. But the EC remains empty.
Do you have any hints for me?
Checkmk-setup-forward

Regards, Tom

2

Do you have rules in the Event Console that match the messages that are forwarded?
If not the messages will silently be dropped by the EC.

3

I’ve configured the rules “Logwatch Event Console Forwarding” as shown in the attached pic.

4

The Event Console receives many messages but only creates events for messages it has a matching rule for.

These rules in the Event Console configuration are not the rules in "Logwatch Event Console Forwarding”.

You need to configure rules in the Event Console, too.

1 Like
5

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.