ELM Advisor

ELM Advisor provides a convenient method for being alerted the moment an event occurs.

Use the ELM Console to configure an ELM Advisor Notification Method. The ELM Advisor Notification configuration settings identify which users will receive events. The Notification is then assigned to an Event View with Event Filters that determine which events will be sent to the ELM Advisor desktops.

Prerequisites

•An Event View with the ELM Advisor Notification Method has been defined in the ELM Console.

•The ELM Advisor Notification Method is configured with your username or with the All connected ELM Advisor users checkbox.

ELM Advisor Window

The ELM Advisor Window displays events that have been received. The window maintains a list of events that have not been read in bold. Events that have been read are displayed in regular font weight.

Using ELM Advisor

The ELM Advisor is not selected by default on install but can be added or selected by running the installation file. By default, the ELM Advisor is started automatically from an entry under the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run registry key.

To Open the ELM Advisor Window

•To open the ELM Advisor, right-click on the ELM Advisor icon in the toolbar and select Open ELM Advisor, double-click the icon, or click on an ELM Advisor pop-up.

ELM Advisor in Windows Notification Area

ELM Advisor Settings

Configure the ELM Advisor through the Options dialog.

To Open the ELM Advisor Settings dialog:

•Right-click on the ELM Advisor icon in the Windows Notification Area and select Options.

•Or open the ELM Advisor and select Tools | Options from the menu.

General Settings Tab

Configures general settings for the ELM Advisor. The Startup setting automatically places the ELM Advisor in your Windows Notification Area. The Retention setting allows you to control the number of events maintained by the ELM Advisor. Note that this effects the amount of memory used by the ELMAdvisor.exe process. When the Console file field is blank, selecting ELM Console from the menu will open the default ELM Console snap-in, if the ELM Console was installed locally. If you have integrated the ELM Console into another MMC Console, you can specify that custom .msc file in this field.

Servers Tab

Displays the status and name of ELM Servers registered with your ELM Advisor. During install of the ELM Server and ELM Console, the local ELM Server is automatically registered with the local ELM Advisor. Remote ELM Servers need to be registered by clicking the Add button.

ELM Server status is checked approximately every 5 minutes. So if the ELM Server is temporarily unavailable, then the ELM Advisor may show a status of Disconnected for up to 5 minutes after the ELM Server has come back on-line. The connection can be re-establish more quickly by selecting the ELM Server that's back on-line and clicking the Test button.

If the ELM Advisor does not get a response from the ELM Server, it then checks for the NormalShutdown registry key on the computer running the ELM Server. If this is missing, then ELM Advisor will attempt to restart the ELM Server service. There must be RPC connectivity to the ELM Server and the logged on user running the ELM Advisor must have permissions to the registry and to services on the ELM Server for this to succeed.

Responses Tab

Configures the type of response when events are received at the desktop. Responses can be independently configured for each of the five event types: Information, Warning, Error, Audit Success, and Audit Failure.

As illustrated in the screenshot, the four responses are:

•Popup Window

•Sound File

•Beep Note: Doesn't work with 64-bit Operating Systems

•Do Nothing