What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags

View all Tags

How do I monitor a Windows Event Log other than the default ones?



I'm trying to monitor the event log on a clustered node for any changes in virtual machine location. I've found the correct location and event ID I want to be notified for but the log is not in the list of the Windows API Event Log defaults. The log I need is the Microsoft-Windows-FailoverClustering/Operational log.



api clustering eventlog wmi

Created on Nov 24, 2020 3:46:18 PM

1 Reply




Thank you for your message.

Regarding your demand, I'm afraid that the event log sensors are not able to monitor a specific log file. However, you can develop a script which uses the PowerShell cmdlet Get-WinEvent -LogName "" to get the entries from it, and then return the number of entries which match your filter(s).

Here is the documentation of the Get-WinEvent cmdlet: https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.diagnostics/get-winevent?view=powershell-7.1

To execute the script in PRTG, you can use the EXE/Script or EXE/Script Advanced sensor.

I invite you to have a look to the manual regarding custom sensors: https://www.paessler.com/manuals/prtg/custom_sensors

Kind regards.

Created on Nov 25, 2020 8:32:34 AM by  Florian Lesage [Paessler Support]

Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.