Associating Event Log Rules
OpManager's Windows EventLog Monitoring allows you to collect and analyze the event logs from all your windows devices, via secure WMI protocol. The collected messages are then parsed based on the eventlog rules configured. When an event log entry matches the criteria mentioned in the eventlog rule, alarms are generated and notifications are sent out according to the notification profile configured.
To know about how to add event log rules, click here. To associate event log rule(s) to a device or multiple devices in your network, follow one of the steps below:
Associating an Event log rule for an individual device
NOTE: This process is applicable only for Microsoft devices ( such as Windows, Hyper-V's etc )
- Go to the Inventory tab and then click on a device to open its device snapshot page.
- Click on the Monitors tab.
![Device snapshot page - Event Log Rules Device snapshot page - Event Log Rules](https://www.manageengine.com/au/network-monitoring/help/images/Event-log-for-individual-device.JPG)
- Click on the EventLog Monitors tab. If the EventLog Monitors tab is not displayed, Click on More -> EventLog Monitors.
- Click the + symbol (on the top right corner) and click on the Associate Monitor option.
- Check the Monitoring Interval checkbox. If you would like to change the monitoring interval, specify the new monitoring interval value ( in mins ).
- Select the Events for which OpManager has to monitor the logs and click on Associate.
Associating an Event log rule for multiple devices
- Go to Settings -> Configuration -> Quick Configuration Wizard.
![Quick Configuration Wizard - Event Log Rules Quick Configuration Wizard - Event Log Rules](https://www.manageengine.com/au/network-monitoring/help/images/associate-eventlog-rules-qcw.png)
- Click on Event log rules.
- Select the Log file which OpManager has to monitor for the occurrence of the event
- Select the event for which OpManager must raise an alert.
- Select the device(s) for which OpManager must raise an alert when the specified event occurs.
- Click on Save.
Note: You can associate a Notification profile for the Event log rules. Click
here to learn how to create a notification profile. In the 'criteria' page, select the particular Event log rule from the
When Event Log Rules generates alarmsection.
To know more about Event log rules, click here.