How to add a Custom Event ID to monitor

[ManojG2000]

Hi,

I need to monitor event ID 517 for the domain controllers. I am not able to find this event ID on the LANSweeper in the Reports and Alerts section.
Any idea how to add this Event ID in the LANSweeper.

Regards,
Manoj

[Hemoco]

- Have events like this actually occurred since you enabled scanning of success audit events?
- Have your machines been rescanned since you enabled scanning of success audit events?

[Hemoco]

These events are not scanned by default. You have to enable scanning of these events:
- In the 4.2 configuration console under Scanning Servers\(name of your server)\Options.
- In the 5.0 web console under Configuration\Scanning Setup\Server Options.

Note that scanning non-error events can greatly increase the size of your database.

[ManojG2000]

Lansweeper wrote:
These events are not scanned by default. You have to enable scanning of these events:
- In the 4.2 configuration console under Scanning Servers\(name of your server)\Options.
- In the 5.0 web console under Configuration\Scanning Setup\Server Options.

Note that scanning non-error events can greatly increase the size of your database.

Thanks for the information.
We have already enabled the "Scan success audit events" but still its not capturing the events with the id 517.

[Hemoco]

What kind of event is this? Error, warning, informational event, success audit or failure audit?

[ManojG2000]

Lansweeper wrote:
What kind of event is this? Error, warning, informational event, success audit or failure audit?

This event id is a security event (Success audit) of windows 2003 Domain Controller.