Creating a Log File to Send to Customers for Remote Monitoring (243283)

MORE INFORMATION

To create the log file, follow these steps:

1. Click Start, point to Programs, point to Administrative Tools, and then click Performance.
2. Click to expand the Performance Logs and Alerts branch, and then click Counter Logs.
3. On the Action menu, click New Log Settings, type a name for your log settings, and then click OK.
4. On the General tab, click Add.
5. Click Select counters from computer, click the object you want in the Performance object box, click the counter you want, and then click Add. Repeat this step for each counter you want to add.
6. Click Close.
7. In the Interval box, type or select the number of time units you want between the data samples, and then click the units you want in the Units box.
8. On the Log Files tab, configure the log file the way you want.
9. On the Schedule tab, configure the log file the way you want, and then click OK.
10. Right-click the log file you created, and then click Save Settings As.
11. In the File name box, type the name of the file you want, click Web Page (*.htm) in the Save as type box, and then click Save.
12. Use Notepad to open the file you saved.
13. Find and replace the computer name with the name of the server you want to monitor, and then save the file.
14. Send the file to your customer, they can load the file in Sysmon to monitor the server using the settings you saved.
15. To load the new Counter Log file in Sysmon to start monitoring (remote or local), expand the Performance Logs and Alerts branch, and then click Counter Logs.
16. On the Action menu, click New Log Settings from, browse to the location of the .htm file, click the .htm file, and then click OK.
17. You are prompted with the name of the Counter Log, use the name for the New Log Settings file or change it, and then click OK.
18. You are prompted with the settings for the New Counter Log file. Make any changes you want, and then click OK.
19. Click the Counter Log file, and then click Start. The Start button turns green when you start monitoring.

NOTE: If you experience problems connecting to and monitoring remote computers, and you receive the Event ID 2029 or Event ID 2046 error messages, click the following link to view this article in the Microsoft Knowledge Base: