How to collect security logs from Windows operating systems and store them for later analysis and reporting with Systems Center Operations Manager (SCOM).

We are having issues retrieving event log files from server event viewers to store in Systems Center Operations Manager (SCOM). The events that are showing are from Operations Manager log file. Is there a management pack that will allow us to view other events from system, application, & security log files? Or is there another way to store these records in SCOM?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

i know that you can save the events as a file for viewing later. You might be able to import them depending on the format nesesary for the import. They can be saved as .txt, .xml, .csv or as a file to be viewed in the event viewer of any windows pc, but i forget the ext that goes with that.
I agree. You can use event viewer to access any machine to see and save logs.
 See what formats SCOM can import.

I hope this helps !
You can do this in SCOM, of course.
Just create a custom rule (Authoring tab in SCOM console), make it an Event Collection, and define the criteria so it catches the events you want in the database, e.g. Log name, Event ID, etc.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Analysis

From novice to tech pro — start learning today.