MonitorWare Knowledge Base

Hi,

We've been using EventReporter for a while and we are very happy with it. However, as we expand our number of servers it takes increasingly longer to modify the rulebase for each EventReporter instance.

If I decide I want to start monitoring Event ID 10 on all servers, for example, is there any quicker way to implement this than having to log on to each server, load up the client and add the rule in?

I realise you can "Select Computer" from just one main client but that involves having the Remote Registry service enabled on the target server which we don't have, for security reasons. Another way I sometimes use is exporting settings as a registry file and re-importing on each server, but I have to manually edit the file to change values such as servername, logs directory path, etc, and this becomes just as time consuming as adding the same rule on every server.

Is there any quicker, more central way of pushing out new rules onto the servers?

Hi,

I recommend that you follow the procedure outlined in

http://www.eventreporter.com/Common/en/ ... out-70.php

The doc talks about initial installation, but the idea is the same for pushing out updates. You just do not install the service. However, make sure that you restart it once the registry file has been imported.

What is missing, obviously, is the actual push mechanism. Most of our customers use tools like NetInstall or even native Active Directory policies for that. Because that is so common, we have not yet integrated any EventReporter-Specific push mechansim. If you do not have any of these tools, you can also use a batch file which is regularly scheduled to be run via task schedule. The batch then resides on a central server. This way, you do not get an immediate update of all servers, but you can ensure that at the next interval they are updated.

I hope this helps,
Rainer Gerhards
Adiscon