TeamViewer Monitoring's Event Log check is a must-have for endpoints running Windows OS, as it allows an insight into exactly what is occurring on your endpoints.
Using Event Viewer
The Windows Event Viewer shows a log of application and system messages, including errors, information messages, and warnings. In order to understand how to use TeamViewer Monitoring's Event Log check, it is important to understand the Event Viewer as well. We recommend the following links to learn more:
TeamViewer's Event Log check
TeamViewer Monitoring uses the Windows API to monitor the Event Viewer. A check is performed once a minute by comparing the Event Viewer logs with the designated Event Log check parameters.
When the parameters set in the policy are met, TeamViewer Monitoring reports it to the designated supporter, with the ability to send an email or push notification.
How to set up the Event Log check
As the Event Log check is a part of TeamViewer Monitoring, it is set up within the Monitoring Policy assigned to the device. For more information on creating a Remote Management policy, please see the following article:
The Event Log check provides the following parameters:
Event log to query
Select the type of log to monitor:
Select the type of event to monitor for:
- Success audit
- Failure audit
💡Hint: If unsure of what type to select, select all types. Once the alerts begin to generate, limit the types based on what information is needed.
Enter the name of the event to be monitored.
Input the specific Event IDs to be monitored. Multiple IDs can be added to the field, separated by commas.
📌Note: If the Event IDs field is left blank, TeamViewer Monitoring will report all Event IDs that meet the other parameters. We recommend inputting specific Event IDs to monitor.
The event source is the name of the software that logs the event. Input all sources to be monitored. If left empty, TeamViewer Monitoring will include all sources.
📌Note: To ensure proper reporting, please verify the source entered is the same as what is listed for Source, located on the General tab of the Event.