I was getting alerted the first time (as described in the initial email from Greg) when running SA on W2K3 STD. When I switched over to W2K I was no longer seeing that behavior. I know that's not a ton of useful information but I figured I would throw it out there.
Eric -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Passow Sent: Tuesday, December 20, 2005 8:23 AM To: salive@woodstone.nu Subject: Re: [SA-list] Event Log Com Check I have reported this issue several times. Version 1.0.0.14 of the com check here and I get alerted on the first cycle. Jason Passow Mississippi Welders Supply [EMAIL PROTECTED] ph: (507) 494-5178 fax: (507) 454-8104 "If you do everything right, nobody will realize you've done anything at all." Dirk Bulinckx wrote: > On the first cycle after a restart it should only give a down IF there > is a connection problem (as the first cycle sets the checkpoint). > On the next cycle(s) a down can also mean matching entries. > > > > > Dirk. > > > > ------------------------------------------------------------------------ > *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > *On Behalf Of *Greg Marr > *Sent:* Tuesday, December 20, 2005 12:49 AM > *To:* salive@woodstone.nu > *Subject:* [SA-list] Event Log Com Check > > Hi > > I'm after a bit of advice on the EventLog Check.... > > We're currently checking for 'Error' messages in the 'System' log and > while SA is running, it works beautifully. However, when we re-start > the SA service, we are alerted to the presence of error messages - > even if we have been alerted about that particular message > previously. I would have thought that SA would store a 'checkpoint' > to ensure that you only get one alert per error message..... > > Have I misconfigured something or is this by design? > > Configuration: > > * EventLog Check - V1.0 Build 17 > * Give Down when - "at least one" > * Logfile - "System" > * Return - "Last Matching Entry" > > Greg > > ********************************************************************** > > This email and any files transmitted with it are confidential and > > intended solely for the use of the individual or entity to whom they > > are addressed. If you have received this email in error please notify > > the system manager. > > ********************************************************************** > To unsubscribe from a list, send a mail message to [EMAIL PROTECTED] With the following in the body of the message: unsubscribe SAlive To unsubscribe from a list, send a mail message to [EMAIL PROTECTED] With the following in the body of the message: unsubscribe SAlive
