<![CDATA[WMI Query to monitor eventviewer]]>Hi there,

I´m using this WMI Query to monitor if a particular event happened on windows eventviewer.

WMI.Query(root\CIMV2\, Select * from Win32_NTLogEvent Where Logfile = 'Application' and EventType = '1' and EventCode = '9006')

The query works great fine, but in WMI it returns several Rows, and I believe that netxms doesn´t know how to deal with those results. So I tried to "Count", but in WMI Count is a property, and not a function. So I cannot make changes in WMI side.

I´m looking for clarification if this is supported in Netxms, or if can I use a transformation script or something like this to get a number of rows, or a value that Netxms can understand and display.

Ideas are great apreciated.

Thanks in advance

]]>https://forum.netxms.org/topic/1424/wmi-query-to-monitor-eventviewerRSS for NodeFri, 13 Nov 2026 11:51:56 GMTMon, 31 Oct 2011 12:53:27 GMT60<![CDATA[Reply to WMI Query to monitor eventviewer on Mon, 02 Sep 2013 16:48:37 GMT]]>Hi!

It should be like this:

WMI.Query(root\CIMV2\, Select * from Win32_NTLogEvent Where Logfile = 'System' and EventType = '3' and EventCode = '1020',%%count%%)

Best regards,
Victor

]]>https://forum.netxms.org/post/11184https://forum.netxms.org/post/11184Mon, 02 Sep 2013 16:48:37 GMT<![CDATA[Reply to WMI Query to monitor eventviewer on Mon, 02 Sep 2013 10:54:51 GMT]]>@victor said in WMI Query to monitor eventviewer:

Hi!

I have added special option to get number of rows in WMI query result set - if you give %%count%% as property name, agent will return number of rows.

Best regards,
Victor

in result - where i should give %%count%% ? What field of DCC?

WMI.Query(root\CIMV2\, Select %%count%% from Win32_NTLogEvent Where Logfile = 'System' and EventType = '3' and EventCode = '1020')

like this?

]]>https://forum.netxms.org/post/11179https://forum.netxms.org/post/11179Mon, 02 Sep 2013 10:54:51 GMT<![CDATA[Reply to WMI Query to monitor eventviewer on Mon, 14 Nov 2011 14:56:13 GMT]]>hi victor,

what about snmp ? can you create something like this for snmp queries ?

Best Regards,
Lindeamon

]]>https://forum.netxms.org/post/6295https://forum.netxms.org/post/6295Mon, 14 Nov 2011 14:56:13 GMT<![CDATA[Reply to WMI Query to monitor eventviewer on Sun, 13 Nov 2011 13:52:56 GMT]]>hi victor,

there is no necessary need for now.
i can wait for the new version.

Best Regards,
Lindeamon

]]>https://forum.netxms.org/post/6293https://forum.netxms.org/post/6293Sun, 13 Nov 2011 13:52:56 GMT<![CDATA[Reply to WMI Query to monitor eventviewer on Sun, 13 Nov 2011 13:39:17 GMT]]>No, I do it today. Version 1.1.7 will include this feature. If it is needed right now, I van make cudtom build of agent.

Best regards,
Victor

]]>https://forum.netxms.org/post/6292https://forum.netxms.org/post/6292Sun, 13 Nov 2011 13:39:17 GMT<![CDATA[Reply to WMI Query to monitor eventviewer on Sun, 13 Nov 2011 13:31:22 GMT]]>hi victor,

was it implemented in v1.1.6 ?

Best Regards,
lindeamon

]]>https://forum.netxms.org/post/6291https://forum.netxms.org/post/6291Sun, 13 Nov 2011 13:31:22 GMT<![CDATA[Reply to WMI Query to monitor eventviewer on Sun, 13 Nov 2011 09:17:29 GMT]]>Hi!

I have added special option to get number of rows in WMI query result set - if you give %%count%% as property name, agent will return number of rows.

Best regards,
Victor

]]>https://forum.netxms.org/post/6290https://forum.netxms.org/post/6290Sun, 13 Nov 2011 09:17:29 GMT<![CDATA[Reply to WMI Query to monitor eventviewer on Tue, 01 Nov 2011 07:57:31 GMT]]>Hi!

Looks like it is not possible with current implementation of WMI.Query. I'll take a closer look at it in a few days - looks like this functionality can be added with simple changes in WMI subagent.

Best regards,
Victor

]]>https://forum.netxms.org/post/6230https://forum.netxms.org/post/6230Tue, 01 Nov 2011 07:57:31 GMT