Windows backup monitoring

1

Hi I noticed the policy template includes a windows backup monitoring option…
How does this work, it doesnt seem to send me any alerts on the sucess/failure of windows backups?
I use windows backups in addition to online backups for a number of my clients and a working reporting alert would be great/
many thanks

2

If you go into Policies > Policy Modules drop-down > Event Log Monitoring > Preset - Windows Backup, you’ll see a recipe for the types of backup-related events that preset monitors for. Here’s a screenshot of some of them, you can expand the section for further event IDs or queries. The % signifies a wildcard/partial search. So it depends on if the event log you’re wanting to monitor is in the recipe, you can add in your own custom queries as well if it’s not listed here.

image
image1967×813 70.2 KB

3

many thanks Ill give that a go!

1 Like
4

thanks for that, but how do I integrate that into my policies?

Is it that I create a new policy and add all the other items into and then apply it to the client machine or?
Here is what I created below

image.png
image.png1656×646 32.9 KB

A custom one that hopefully monitors for event 517 source backup in the application log which is one I get on a customer site frequently, where am I going to apply that to their server policy?
Im sure its easy when you know how and probably a stupid question but thanks for your help
regards

5

Policy edit, Monitors - Add a Monitor - Event Log

1 Like
6

This policy doesnt seem to work at all, Syncro has released a Cyberdrain script to this, I wonder
why woudnt syncro fix they feature, but decided to release a script.

7

yes not working for me at all either must look at that script thanks

8

Also not working for me. More and more, the solutions are “run this script instead” for fundamental parts of the working platform we were sold on. /rant

9

Syncro is reading the event logs, my other event log monitors are working fine, so I assume as a whole the system is “functioning”. I haven’t used WB in years, so it depends on where they are writing to and if the IDs still match. I thought the logs are going to Microsoft-Windows-Backup event log and to my knowledge, Syncro doesn’t check these.

PS. Their default list is the same list that CWA and Kaseya, so I don’t know what has been tested. This seems to be a list that was passed around and some things may only work if they are programmed to read outside the basic Application, Security, and System logs.