GFI EventsManager

How can we improve?

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  1. Ability to Alert via Email when GFI Services/processes fail

    We utilize GFI EventsManager 2012 to collect logging data for compliance and for that reason it must run nearly 24/7. In the past couple of months I have had issues where occasionally various aspects of SNMP or SYSLOG stop. Sadly no alert is raised unless I am in the GUI everyda, which I am not nor do I guess are other overburdened IT professionals.

    What would be great is if their was an option that I could enable to have GFI EventsManager email me when any of its processes failed(I understand not being able to email if esmproc.exe stopped) such…

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  2. Feature to filter event sources on full privileges user

    I'd like to have feature for full privileges user able to filter event sources just like read-only user. because for my country computer crime act. it's need to separate between system admin and data admin. the system admin can configure the log server but cannot view or access collected log. and data admin cannot configure the log but can view or access collected logs.

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  3. Add proper field operators for Dynamic Fields in text logs

    When trying to create a custom rule for actions on a Text Log (IIS) against the log field name "time-taken", the Field Operators available are primarily for static values. i.e.. Equal to, Like, Contains, or Value in list, when they should be Equal to, Less than, or Greater than. So, there is no way to create a rule that would trip if time-taken were greater than (or less than) some particular value - very important when trying to identify page hits that took longer than x amount of time.

    IMO this is a serious omission/oversight.

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  4. Report automation

    Currently GFI eventmanager has capability to schedule reports in html file format. I will be great if we schedule report using different file formats i.e. pdf

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  5. Scanning Windows in EventsManager

    We have found that event log scanning has a significant impact on our bandwidth during working hours. It would be beneficial if event log scanning could be restricted to a specific time frame (e.g. 6:00pm-8:00am) so that logs could be gathered regularly with minimal impact to users. I know that scanning can be set to hourly, daily, etc., but I think it would be great if it could be done hourly or more frequently after hours. Another approach would be the ability to throttle back scanning during work hours. For example, real time after hours and every 2 hours during…

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  6. Export config does not include Reports or dabase rotatation

    I've just recently moved my EventsManager 2013 to a new machine. I exported/imported the configuration and to my surprise, Reports is not part of the export/import function. Why would this not be an option? If I'm moving to a new configuration I sure don't want to have to recreate all my reports. I found in the KB how to move them, but I shouldn't have to do another step to get my reports. I also noticed just today that it does not appear that my database rotation did not come across with the configuration either. This would also be nice…

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  7. Allow one EM server to report from other EM servers

    It would be nice to have the reporting tool with EventsManager to configure it to look at multiple EventsManager servers to have a single set of reports. I don't want to have to manually change the database to generate another set of reports for my second EventsManager server.

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  8. View Edit Query Fields

    When I create a view, I need to select fields to to query on. The Edit Query Restriction dialog box presents me with a list of literally THOUSANDS of possible fields. And it does this with no way to sort them!

    If the field is not in the first 1-2 dozen, well, good luck! The fields are, as far as I can tell, completely random. I would dearly love to be able to sort the field list! It's ridiculous the way it is now, poring through column after column after column after column of text, eyes crossing, mouse-click finger growing…

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  9. Allow non-administrators to run EventsManager

    Currently EventsManager requires all users (even read-only) to be a local administrator just to run the program.

    What's the point of having a local user database within the program if only local administrators can launch it? Seems odd to have read-only users still be god of the entire system doesn't it?

    I want to be able to have some "users" of EventsManager that are not a local administrator.

    Older versions of the program didn't have this "feature" and shouldn't be too difficult of an adjustment to make.

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  10. Adding Comments in

    For every server, be able to add comments not necessarily connect to an event (like Microsoft dynamics CRM).

    Currently we can add comments according to events but not directly in the Comment field.

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  11. ssl email in events manager

    I just got finished with a chat session with support. I was amazed to learn that events manager does not support ssl email. Most all businesses that I know have already switched to this or working on it. I feel like this should be a top priority to be able to fully utilize this product.

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  12. Allow more than one schema to be used in text log collection

    At present EventsManager only allows you to use one schema per server for collection and processing of text logs. If you have more than one text log type on a single server that requires different schemas for processing them, you cannot specify a second schema to process the different text log types.

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  13. Database creation for historical data

    At the moment of writing databases are created when needed, but it ccould have data in it with a creation date that is not logical to store next to eachother (time-wise). I like the database switch mechanism in Mailarchiver. Isn't it possible to do this also for ESM? So when I add a source, it will start taking the data from that machine and then store it in the databases related to either month, bimonthly, quarterly, half-yearly, annual.

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  14. More then one Email template

    It's only possible to format one email message under "Alerting Options". I would be nice if I could add new templates. This way the alert mails could provide more information to a special alert and could be formatted in a way that only needed information are displayed. This on template must be formatted very universally.

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  15. Add variable %rule description%

    I would like to use the rule description in my alerting options, but it's not available. Although there is %rule name%, %check name% and %check description% it's not possible to get the information of the rule description. Please add this to the fields of an event.

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  16. Network messages alerts with Windows Server 2008 and Windows 7

    Makes the fonctionnality Network messages alert (which inform recipients that a particular event has occurred for) compatible with Windows Server 2008 and Windows Seven.

    1 vote
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  17. Change license model to open new opportunities

    I talked with some customers/resellers, which didn't buy EventsManager, because the license model is not the best. I've collected some ideas from them:

    License Model 1:

    - License per format and node (e.g. 3x snmp enabled router = 3x EventsManager SNMP Licenses)
    - difference in Windows Eventlog for Workstation and Server (already available, so no change needed)
    - difference in Syslog for Workstation and Server (e.g. 3x Ubuntu Deskop = 3x EventsManager Syslog for Workstation)

    They tell me the reason: The customer don't understand to buy a very expensive server license for a router or switch (e.g. per Node =…

    0 votes
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  18. EventsManager sees consistency/correlations

    From a large account we've had the question if it was possible to let GFI ESM see correlation between events. For example (and many examples could be given for this account) they have a key less entry system that has multiple touch points. Whenever someone opens a door, takes the elevator and enters a server room, with 'some' additional intelligence, this chain of events could be reported as a security breech.
    Why should this be added, is because this way the reporting of special events that are not normal, can be flagged as a breech of security and when there…

    0 votes
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  19. scan by OU

    We have three locations and only one domain I would like to be able to scan by OU. I think this would be an easy feature to add. This will add much more control over this product while also utilizing active directory which we are all familiar with.

    0 votes
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  20. Custom Ports SQL server monitoring

    I would like the ability to monitor SQL servers that does not use the standard ports (1433). We have a number of installations that need to use custom ports (1435, 1438)

    0 votes
    Sign in
    Signed in as (Sign out)

    We’ll send you updates on this idea

    Collecting Feedback  ·  2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

GFI EventsManager

Feedback and Knowledge Base