EVENTMONITOR [/=] server name /S"source" /T"type" /D"description" n command

 

 

 

Usage:

 

If you don't enter any arguments, EVENTMONITOR will display the events it is currently monitoring.

 

The command line will be parsed and expanded before EVENTMONITOR is executed, so if you want to pass redirection characters or variables to command you will need to protect them (by enclosing in single back quotes, doubling the %'s, or using command grouping).

 

If the last argument on the line is a single (, it is interpreted as the beginning of a command group. EVENTMONITOR will append the following lines (in a batch file) or prompt you for more input (at the command line) until it gets a closing ).

 

You can specify multiple /D, /S, and /T arguments. If you want to monitor multiple events in a log, put them into a single EVENTMONITOR command. EVENTMONITOR creates a separate thread for each EVENTMONITOR command, so if you have multiple commands you will be wasting CPU time, RAM, and risk having command executed simultaneously in different threads.

 

The monitoring runs asynchronously in a separate thread. When the condition is triggered, the command will be executed immediately. This may cause problems if you try to write to the display or access files while the main TCC thread is also performing I/O. You may need to use START or DETACH in command to avoid conflicts.

 

EVENTMONITOR creates environment variables when an event is triggered that can be queried by command. The variables are deleted after command is executed.

 

 

 

 

 

 

 

Options:

 

 

 

 

 

 

Success

Error

Warning

Information

Audit_Success

Audit_Failure