System log (SM21) and Windows Event Viewer

[doankhac_luong]

Dear Experts,

Is there any way to disable sync between System Log (SM21) and Windows Event Viewer?

Please help me,

Thanks & Best Regards,

Liang

[alwina_enns · Accepted solution]

Dear Liang,

do I understand correctly, that syslog messages are written to the windows event viewer and you would like to disable it? Are all messages from syslog written to the windows event viewer or only some of them? Which kernel release has the affected system?

regards,
Alwina

[doankhac_luong · Accepted solution]

Dear Alwina,

Thanks for your reply.

Yes, I want to disable red alert on Windows Event Viewer. I think Windows Event Viewer captures the message from SAP MMC or SM21.

I am using kernel 7.02, netweaver 7.02, Windows 2008 R2

Could you suggest some idea?

Thanks & Best Regards,

Liang

[alwina_enns · Accepted solution]

Dear Liang,

for this there is an old note:

72616  Syslog messages in the NT event log

https://service.sap.com/sap/support/notes/72616

You can check it, if it helps.

regards,
Alwina

[doankhac_luong · Accepted solution]

Dear Alwina,

I was checking that SAP note, need to test first.

I found this note also

https://service.sap.com/sap/support/notes/854861

Thank you so much,

Best regards,

Liang

[alwina_enns · Accepted solution]

Dear Liang,

if I understand the note 854861 correctly it describes how you can monitor messages in Windows Event Viewer with an agent, but it will not suppress syslog messages in event viewer. The only possibility which I could find untill now is the note 72616, and as per this note you can configure the syslog filter in RZ20 in the way, that the red messages in syslog will not be considered as critical and will not be reported to the windows event viewer. For configuration of the syslog filters in RZ20 you can check the notes

https://service.sap.com/sap/support/notes/621644
https://service.sap.com/sap/support/notes/214247

regards,
Alwina

[doankhac_luong · Accepted solution]

Thank Alwina,

The solution is provided