Hi,

 

I am just wondering what events or what critical events are worth monitoring from the event viewer.

Keywords, Event IDs' etc..

Disk, disk, controller, raid, failed, bluescreen, dump Those are my commonly used keywords.

Are those terms not a bit broad?
Will you not get a notification anytime there is an event logged with "Disk" etc.. ??

 

What about DHCP or DNS?

 

Or Windows server backups?

Well it depends from case to case. I never use DHCP and my DNS server never failed me but I monitor it with the service monitoring feature of pc monitor so monitoring dns event log entries is just redundant.

 

Yes, if the event contains one of the configured keywords you will receieve a notification.

 

Windows Server Backup is kind of hard to monitor at the moment, you need to research it's event IDs and pinpoint every possible case.

Edited August 9, 201311 yr by Paul

Update: Windows Server Backup module is now available in the latest Windows Agent (4.0) and works on Windows Server 2008 R2 or higher.