[Figure 13–1 shows the relationship between each managed Windows system, the Windows Resource Monitor installed on it, and Operations Sentinel components. The Windows Resource Monitor receives Windows events from the Windows event logs and reports them to the Operations Sentinel server. Operations Sentinel Console displays them in its Alerts window.

Figure 15. Windows Resource Monitor and Operations Sentinel

Operations Sentinel can monitor the following components on Windows systems:

The Windows Resource Monitor monitors events on each Windows partition, server, and workstation on which it is installed, and reports those events to the Operations Sentinel server. On a Windows system, an event is any significant occurrence that requires notification to the user. By default, Windows events are logged to one of the following three event log files:

The Windows Resource Monitor converts Windows events to Operations Sentinel alerts. If the Windows system is part of the current zone, Operations Sentinel Console includes these alerts with the zone alerts. If the system is not part of the current zone, Operations Sentinel Console includes them with the other alerts. Operations Sentinel handles these alerts in the same manner as other alerts.

Windows Resource Monitor can also monitor Custom Windows Event Log Channels. The Name box under the event logs for Windows Resource Monitor Policy must be identical to the Log Name of the Custom Event Channel, for example, Unisys-OS 2200-Server Management Control/Operational.