Windows Update template
The Windows Update template provides three Log File rules for the monitoring of Windows updates:
System Monitors - Log File Monitor
Contains the following monitors:
- Fatal Errors - Log File(c:\windows\windowsupdate.log) Include(FATAL) Exclude()
- Pending Updates - Log File(c:\windows\windowsupdate.log) Expression(“.+Reporting status event with [1-9][0-9]*installable.+”)
- Reboot Required - Log File(c:\windows\windowsupdate.log) Include(Install call completed, reboot required = Yes”) Exclude()
NOTE: All actions for each of the above rules within this template are set to a default of sending an alert to the Enterprise Console. You must manually change this setting if you require an alternative action to be taken upon the generation of an alert.