You have 15 computers that run Windows 7.
You need to implement a monitoring solution that meets the following requirements:
• Sends an e-mail notification when an application error is logged in the event log
• Runs a script to restart the computer if an application error occurs between 17:00 and 07:00
• Minimizes the administrative effort required to monitor applications
What should you do?
A.
On all the computers, configure a custom view. Configure a custom task for the application error
events.
B.
On a computer, configure a custom view to display the application errors. Configure a custom task
for the application error events.
C.
On a central computer, configure an event subscription. On all of the computers, configure a
custom task in the Forwarded Events log.
D.
On all the computers, configure an event subscription to a central computer. On the central
computer, configure a custom task in the Forwarded Events log.
Explanation:
Event Forwarding
Event forwarding enables you to transfer events that match specific criteria to an administrative (or
collector) computer. This enables you to manage events centrally. A single event log on the collector
computer holds important events from computers anywhere in your organization. You do not need
to connect to the local event logs on individual computers.
Subscriptions
In a source-initiated subscription (sometimes termed a source computer–initiated subscription), the
computer on which an event is generated (the source computer) sends the event to the collector
computer. You would use a source-initiated subscription when you have a large number of source
computers and you configure these computers through Group Policy.