How to build a custom alert

Coordinator
Aug 22, 2008 at 7:39 PM
Edited Aug 22, 2008 at 7:49 PM
How to build a custom alert.

Read this first -- http://msdn.microsoft.com/en-us/library/cc721719.aspx

Don't panic you don't HAVE to know PowerShell in order to do this.

Step 1 - Identify the event in the event log you want to track.

Step 2 - go to www.guidgen.com and generate a new GUID.  Copy it and hold it for later use.  (this is place of using PowerShell to generate a GUID, you can skip that step and use www.guidgen.com instead)

Step 3 - look at the event you want to track.  Click the Details tab, click Friendly View, and then expand System. Record the information for the *Provider Name* and *Channel*, which will be used later in this document.

<?xml version="1.0" encoding="utf-8" ?>
<AlertDefinitions>
<AlertDefinition ID="Insert the GUID here" Default="1"
Title="Put a descriptive title here" Source="Indicate here that it's a Server or Computer issue">
    <Parameters>
     <Path>*Channel value from the event*</Path>
     <Provider>*Provider value from the event*EventLog</Provider>
     <SetEventID>*Insert the event ID number from the Event*</SetEventID>
     </Parameters>
</AlertDefinition>
</AlertDefinitions>

Enter the appropriate information in notepad and save it as an XML file

<?xml version="1.0" encoding="utf-8" ?>
<AlertDefinitions>
<AlertDefinition ID="896e6561-b29d-42b5-b349-a87460c8556f" Default="1"
Title="Unexpected Shut down" Source="Server">
    <Parameters>
     <Path>System</Path>
     <Provider>EventLog</Provider>
     <SetEventID>6008</SetEventID>
     </Parameters>
</AlertDefinition>
</AlertDefinitions>

It will look like that.

To deploy the custom alert
  1. Copy the .xml file that was created earlier in this document to the %programfiles%\Windows Small Business Server\Data\Monitoring\ExternalAlerts directory on the computer that is running the Windows SBS 2008 operating system.

  2. Restart the Windows SBS Manager service.

    To restart the Windows SBS Manager service
    1. Click Start, point to Administrative Tools, and then click Services.

    2. Right-click the Windows SBS Manager service, and then click Restart.