Clearing Event Logs with MOM 2007

[robwheels]

When I clear event logs there is no creation of another event that the log has been cleared. Is there a way to track this on a server? Can MOM 2007 track this?

 

[monsterjta]

There will be an security event created whenever the event log is cleared. You'll need to configure a security event rule with this particular event ID as the criteria. I don't know the event ID off hand, but this can be easily identified by clearing an event log or a simple google search.

I hope you find this post helpful,

Jonathan Almquist
Minneapolis, MN

 

[robwheels]

Thanks!! It seems to work when I clear the security log, but does not generate one for the system or application log.
Any idea why?