Your network consists of a single Active Directory domain. The functional level of the domain is
Windows Server 2008 R2. The domain contains 200 Windows Server 2008 R2 servers. You need to
plan a monitoring solution that meets the following requirements:
• Sends a notification by email to the administrator if an Application error occurs on any of the
servers
• Uses the minimum amount of administrative effort
What should you include in your plan?
A.
On one server, create event subscriptions for each server. On the server, attach tasks to the
Application error events.
B.
On one server, create an Event Trace Sessions Data Collector Set. On all servers, create a System
Performance Data Collector Set.
C.
On all servers, create event subscriptions for one server. On all servers, attach a task for the
Application error events.
D.
On all servers, create a System Performance Data Collector Set. On one server, configure the
report settings for the new Data Collector set.
Explanation:
http ://technet.microsoft.com/en-us/library/cc749183.aspx
http ://technet.microsoft.com/en-us/library/cc748890.aspx
http ://technet.microsoft.com/en-us/library/cc722010.aspx
Event Subscriptions
Applies To: Windows 7, Windows Server 2008 R2, Windows Vista
Event Viewer enables you to view events on a single remote computer. However, troubleshooting an
issue might require you to examine a set of events stored in multiple logs on multiple computers.
Windows Vista includes the ability to collect copies of events from multiple remote computers and
store them locally. To specify which events to collect, you create an event subscription. Among other
details, the subscription specifies exactly which events will be collected and in which log they will be
stored locally. Once a subscription is active and events are being collected, you can view and
manipulate these forwarded events as you would any other locally stored events.
Using the event collecting feature requires that you configure both the forwarding and the collecting
computers. The functionality depends on the Windows Remote Management (WinRM) service and
the Windows Event Collector (Wecsvc) service. Both of these services must be running on computers
participating in the forwarding and collecting process. To learn about the steps required to configure
event collecting and forwarding computers, see Configure Computers to Forward and Collect Events.
Additional Considerations
• You can subscribe to receive events from an existing subscription on a remote computer.
Configure Computers to Forward and Collect Events
Applies To: Windows 7, Windows Server 2008 R2, Windows Vista
Before you can create a subscription to collect events on a computer, you must configure both the
collecting computer collected (collector) and each computer from which events will be collected(source). Updated information about event subscriptions may be available online at Event
Subscriptions.
To configure computers in a domain to forward and collect events
1. Log on to all collector and source computers. It is a best practice to use a domain account with
administrative privileges.
2. On each source computer, type the following at an elevated command prompt:
