GFI EventsManager

How can we improve?

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  1. Allow non-administrators to run EventsManager

    Currently EventsManager requires all users (even read-only) to be a local administrator just to run the program.

    What's the point of having a local user database within the program if only local administrators can launch it? Seems odd to have read-only users still be god of the entire system doesn't it?

    I want to be able to have some "users" of EventsManager that are not a local administrator.

    Older versions of the program didn't have this "feature" and shouldn't be too difficult of an adjustment to make.

    1 vote
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  2. Scan Now Should Scan Immediately

    Maybe I am missing something, but it appears to me that when I select a machine, right lick on it, and clisk on Scan Now, it does not immediately start scanning the machine. Instead, it addes the machine to the end of the job queue. ANd then I have to wait (and wait and wait) for it to bubble up to the top of the queue, and finally run. This is a major pain in the neck!

    When I am adding in a new log file, and am wanting to verify it is working correctly, I have to make a…

    0 votes
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  3. View Edit Query Fields

    When I create a view, I need to select fields to to query on. The Edit Query Restriction dialog box presents me with a list of literally THOUSANDS of possible fields. And it does this with no way to sort them!

    If the field is not in the first 1-2 dozen, well, good luck! The fields are, as far as I can tell, completely random. I would dearly love to be able to sort the field list! It's ridiculous the way it is now, poring through column after column after column after column of text, eyes crossing, mouse-click finger growing…

    1 vote
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  4. Allow one EM server to report from other EM servers

    It would be nice to have the reporting tool with EventsManager to configure it to look at multiple EventsManager servers to have a single set of reports. I don't want to have to manually change the database to generate another set of reports for my second EventsManager server.

    1 vote
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  5. Export config does not include Reports or dabase rotatation

    I've just recently moved my EventsManager 2013 to a new machine. I exported/imported the configuration and to my surprise, Reports is not part of the export/import function. Why would this not be an option? If I'm moving to a new configuration I sure don't want to have to recreate all my reports. I found in the KB how to move them, but I shouldn't have to do another step to get my reports. I also noticed just today that it does not appear that my database rotation did not come across with the configuration either. This would also be nice…

    1 vote
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  6. Scanning Windows in EventsManager

    We have found that event log scanning has a significant impact on our bandwidth during working hours. It would be beneficial if event log scanning could be restricted to a specific time frame (e.g. 6:00pm-8:00am) so that logs could be gathered regularly with minimal impact to users. I know that scanning can be set to hourly, daily, etc., but I think it would be great if it could be done hourly or more frequently after hours. Another approach would be the ability to throttle back scanning during work hours. For example, real time after hours and every 2 hours during…

    1 vote
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  7. Active Directory Replication

    Not sure if some else posted-it but ...

    It would be nice to monitor AD replication. Like repadmin but GFI style.

    0 votes
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  8. Merge Reports

    Creating custom reports can be tedious and confusing to end users, especially when the information can be found in multiple different default reports. A "Merge Reports" feature would be a big improvement

    0 votes
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  9. GFI EventManager Performance

    Currently GFI eventmanager is a 32 bit application. It is a little bit slow when it has to process large quantity of logs (This has been experienced in out operation). Let make this application a 64 bit cause there are powerful servers in the market which can support heavy load.

    3 votes
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  10. Report automation

    Currently GFI eventmanager has capability to schedule reports in html file format. I will be great if we schedule report using different file formats i.e. pdf

    1 vote
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  11. Add proper field operators for Dynamic Fields in text logs

    When trying to create a custom rule for actions on a Text Log (IIS) against the log field name "time-taken", the Field Operators available are primarily for static values. i.e.. Equal to, Like, Contains, or Value in list, when they should be Equal to, Less than, or Greater than. So, there is no way to create a rule that would trip if time-taken were greater than (or less than) some particular value - very important when trying to identify page hits that took longer than x amount of time.

    IMO this is a serious omission/oversight.

    1 vote
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  12. EventsManager Configuration automatic export/backup

    Within EventsManager you can manually export (backup) the configuration so you have it in case you need to go back to it or want to copy to a new machine. It would be nice if you could have this automatically do this on a schedule so you don't have to remember to do this after each change. It would also be nice if you could allow the user to configure a naming convention they would like to use. For example: EventsManager_Version_date/time_stamp.esmbkp

    0 votes
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  13. Feature to filter event sources on full privileges user

    I'd like to have feature for full privileges user able to filter event sources just like read-only user. because for my country computer crime act. it's need to separate between system admin and data admin. the system admin can configure the log server but cannot view or access collected log. and data admin cannot configure the log but can view or access collected logs.

    1 vote
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  14. Disable logon attempts from the account service is running as

    We are using Eventsmanager to collect event logs etc from a server located in a DMZ, which is out of reach from domain controllers. This prevents the account under which GFI Eventsmanager service is running to log on to this server. We have specified another set of credentials in the Event Source properties.

    However, the service still tries to log on to this server as the domain account that the EM service is running under in addition to the credentials supplied in said properties. This generates 36 failed logon attempts per hour on a production server, which triggers some other…

    4 votes
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  15. Support VMware SNMP and Syslog out of the box

    Since VMware is present in many environments now, it would be useful if GFI EventsManager automatically recognized and had canned Event Processing and Views for VMware ESXi and vCenter.

    4 votes
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  16. Ability to Alert via Email when GFI Services/processes fail

    We utilize GFI EventsManager 2012 to collect logging data for compliance and for that reason it must run nearly 24/7. In the past couple of months I have had issues where occasionally various aspects of SNMP or SYSLOG stop. Sadly no alert is raised unless I am in the GUI everyda, which I am not nor do I guess are other overburdened IT professionals.

    What would be great is if their was an option that I could enable to have GFI EventsManager email me when any of its processes failed(I understand not being able to email if esmproc.exe stopped) such…

    1 vote
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  17. import configuration

    Since our languare is not English, some event browser filter which contains English value like category contains "logoff", the filter I have to manially change to category contains "??"...

    Everytime ESM upgrade, we have to do it one by one. I've try to use import/export to import old configuration I backed up from old build. But I am afraid the import job will impact to new build and maybe lost some new configuration.

    Please fild a way to let us just export chenged configuration and compare with new configuration, then decide which old configuration will import to new build.

    1 vote
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  18. EventsManager Events Browser Tab

    When switching to the Events Browser tab, the application should wait for the user to initiate a query instead of resubmitting the previous query. In addition, the user should be able to quickly and easily time bound the query instead of searching all records.

    0 votes
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  19. EventsManager Web Interface

    There should be a Web interface to EventsManager for browsing events and viewing reports.

    4 votes
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  20. EventsManager Reports Should Support Server 2008 and Windows 7

    EventsManager Reports should support the new event ID's in Windows Server 2008 and Windows 7. It should not be incumbent on each user to update the reports for these "current" operating systems.

    1 vote
    Sign in Sign in with GFI
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

GFI EventsManager

Feedback and Knowledge Base