Sending report and event log alerts

Lansweeper lets you send 2 types of asset alerts: alerts for reports listed in the web console's Reports tab, which are sent on a scheduled basis, and event log alerts, which are sent as soon as the Windows event log entries specified by you are scanned. Sending alerts is useful for tracking vital network information, software and other changes, server or workstation errors and more! Both report and event log alerts can be sent via email. From Lansweeper 6.0 onward, report alerts can be copied to a directory as well, instead of being sent via email.

If you have multiple scanning servers, you can configure event log alerts separately for each server. Each scanning server will send the event log alerts for the assets it's scanning. Report alerts on the other hand can and only need to be configured on one scanning server. That scanning server has access to all data in your database and can send any report results you want.

Submitting your email server and groups

If you plan on having your alerts sent via email, be sure to submit your email server settings prior to configuring your actual alerts. You should also configure the email groups the alerts should be sent to. To set up the mail server and groups, do the following:

  1. Browse to the following section of the web console: Configuration\Email Alerts
    Email Alerts menu
  2. Enter your SMTP server, port number, the email address you would like to send from and its display name into the correct input boxes. Optionally, you can load a built-in SMTP configuration, use SSL and/or enable authentication.
    SMTP configuration for report and event log alerts
  3. Hit the Add E-mail Group button. An email group is a collection of email addresses your alerts will be sent to. Enter a name for the group into the upper input box of the popup window. In the second input box, enter one or more email addresses, separated with semicolons. Then hit Ok. You can create multiple email groups to send various alerts to.
    creating email groups for report and event log alerts

Setting up report alerts

To set up a report alert, do the following:

  1. Browse to the following section of the web console: Configuration\Email Alerts
    Email Alerts menu
  2. If you will be sending your reports via email, make sure you submitted your email server and groups as specified at the beginning of this article.
  3. Tick the Enable report mailing checkbox.
    enabling report alerts
  4. Hit the Add report button, select one or more reports and hit Add. You can use the search box to find specific reports.
    selecting reports for report alerts
    A report is only mailed if it has results. Empty reports are not mailed.
  5. For each report, choose whether to have it sent via email or copied to a directory and choose an export type as well. Available export formats are Excel, CSV and HTML. If you choose Directory as your Alert Type, the report results will be copied to the following folder on the machine hosting your Lansweeper installation:
    Program Files (x86)\Lansweeper\Service\export
    choosing an alert type and export format for report alerts
  6. Hit the Set time schedules button to select the schedule to be used for the report alert. The resulting popup lists several built-in schedules, but you can create your own as well, with the available button in the popup window.
    choosing a schedule for report alerts
  7. If you chose E-mail as your Alert Type, choose an email group to send the report alert to.
    choosing an email group for report alerts
  8. If you chose Directory as your Alert Type, optionally tick the Overwrite checkbox. If this box is checked, a report's results will be overwritten in the export folder every time the alert is triggered. If this box is unchecked, a new file will be generated in the export folder every time the alert is triggered.
    overwrite option for report alerts
  9. The reports will now be sent based on the schedules specified by you. You can immediately have all reports mailed as well by hitting the E-mail all configured reports now button.
    report alert sent via email

Setting up event log alerts

To set up an event log alert, do the following:

  1. Browse to the following section of the web console: Configuration\Email Alerts
    Email Alerts menu
  2. Make sure you submitted your email server and groups as specified at the beginning of this article.
  3. Tick the Enable eventlog alerts checkbox.
    enabling event log alerts
  4. Hit the Add event filter button, select an event from the list of scanned events and hit Ok. Alternatively, you can manually type an event source and event ID in the popup window, if you would like to create an alert for an event that hasn't been scanned yet.
    choosing an event for event log alerts
    Keep in mind that, to keep your database as small as possible, only error events are scanned by default. To generate alerts for non-error events, make sure the necessary event types are enabled for scanning.
  5. Optionally, modify the criteria the event has to meet to generate an alert. Hit the pencil shaped edit button next to the event and then Add Filter in the resulting popup.
    modifying the criteria of an event log alert
    - Computer: NetBIOS name of the computer generating the event.
    - Domain: NetBIOS name of the domain/workgroup the event originates from.
    - EventID: numeric code identifying the event.
    - Eventtype: Error, Warning, Information, FailureAudit or SuccessAudit.
    - Logfile: specific log the event belongs to.
    - Source: source of the event.
    - User: user that was logged into the computer when the event was generated.
    - Message: comment included in the event.
    You can use the Like/Not Like operators and the % sign to look for partial matches.
    • "Computer Like LAN%" means: any computer whose name starts with the word "LAN".
    • "Computer Like %LAN" means: any computer whose name ends in the word "LAN".
    • "Computer Like %LAN%" means: any computer whose name contains the word "LAN".
  6. For each event, select the email group you want to send the alerts to.
    choosing an email group for event log alerts
  7. As soon as a new occurrence of the specified event is scanned on a computer, an email is sent to the mail group of your choice.
    event log alert sent via email
    Event alerts are best used in combination with Eventlog Only scanning targets. Eventlog Only scanning targets allow you to scan event log entries as frequently as once a minute, ensuring that you receive your email alerts near-instantaneously.

Related Articles