What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

Windows Firewall Event Viewer

Votes:

0

Hello all, I started using PRTG a few weeks ago and liking it. I am setting up some sensors for Event Viewer IDs that I want to monitor and be alerted about. I am using the Win API event log as it seems to work better for me than the WMI. However, I cant seem to find any options to monitor the Windows firewall with advanced security for Windows 10. I want to monitor the following events • ID 2003: The firewall was activated for a profile. • ID 2004: A new rule was created. • ID 2005: A rule was modified. • ID 2006: A rule was deleted What am I missing?

event-viewer prtg windows-firewall

Created on Feb 15, 2021 11:36:00 PM



3 Replies

Votes:

0

Now i try with custom EXE/SCRIPT sensor and no luck... I use modpoll.exe program ( https://www.modbusdriver.com/modpoll.html ) I don't know how to program script to run a program and read values.

In windows cmd i use command: modpoll.exe -c 1 -r 1 -f -t 3:float -p 4001 -m enc 192.168.5.87 and I get the answer :

-- Polling slave... (Ctrl-C to stop)
[1]: 234.171463

This is Phase 1 VOLT

If i use modpoll.exe -c 1 -r 1 -f -t 3:float -p 4001 -m enc 192.168.5.87 and I get the answer : -- Polling slave... (Ctrl-C to stop) [7]: 5.705577 This is Current of L1

Now have problem with writing script in Windows PowerShell ISE....

Can someone can help me ?

Thank you!

Damjan

Created on Feb 16, 2021 5:36:46 PM

Last change on Feb 17, 2021 5:24:01 AM by  Sven Roggenhofer [Paessler Technical Support]



Votes:

0

Hello Happy,

Thanks for the KB post, the Event Log Sensor indeed doesn't monitor events in Windows firewall with advanced security.

As a workaround, you would need to write a script, for example in Powershell to query the event log and use our custom sensor.

For more information please check these links:

https://www.paessler.com/manuals/prtg/exe_script_sensor.htm https://www.paessler.com/manuals/prtg/exe_script_advanced_sensor.htm

You can check the expected syntax for both sensors insider your PRTG under 'Setup > PRTG API', please refer to the "Custom Sensors" tab.

You can see examples for custom sensors within PRTG's folder under: C:\Program Files (x86)\PRTG Network Monitor\Custom Sensors

Thanks.


With kind regards,
Chan Siau Hen
Technical Support Team, Paessler AG

Created on Feb 18, 2021 7:02:35 AM by  Chan Siau Hen [Paessler Technical Support]



Votes:

0

Hello Happy,

Thanks for the KB post, the Event Log Sensor indeed doesn't monitor events in Windows firewall with advanced security.

As a workaround, you would need to write a script, for example in Powershell to query the event log and use our custom sensor.

For more information please check these links:

https://www.paessler.com/manuals/prtg/exe_script_sensor.htm https://www.paessler.com/manuals/prtg/exe_script_advanced_sensor.htm

You can check the expected syntax for both sensors insider your PRTG under 'Setup > PRTG API', please refer to the "Custom Sensors" tab.

You can see examples for custom sensors within PRTG's folder under: C:\Program Files (x86)\PRTG Network Monitor\Custom Sensors

Thanks.


With kind regards,
Chan Siau Hen
Technical Support Team, Paessler AG

Created on Feb 18, 2021 7:02:37 AM by  Chan Siau Hen [Paessler Technical Support]




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.