Bugfixes:

• A malformed syslog packet could crash the EventSentry agent when the "Log to Event Log" option was selected
• Deleting a global variable could change the ordering and values of inherited variables
• Some variables would not be passed correctly to the "Process" action

Bugfixes:

• The start (index) page of the web reports would not display on new installations under some circumstances
• Creating certain new actions would show a non-related error message under certain circumstances

Bugfixes:

• Dial-Up RAS feature does not dial RAS connection
• Heartbeat agent would log useless error message to event log
• Heartbeat agent would incorrectly report a host as delayed under limited circumstances

Bugfixes:

• The "Test Against Filter Rules" feature would not correcly test custom event logs
• File monitoring would only monitor in intervals, not in real-time under certain circumstances
• Using the "Remote" menu in the management console could crash the console

Bugfixes:

• The previous patch introduced a problem where the current heartbeat status would not be reflected in the web reports under some circumstances.

Bugfixes:

• Fixed handle leak when re-reading the configuration
• Multiple Diskspace packages would not be merged correctly under some circumstances
• Moving computers between groups would not correctly sync computers with web reports (database)
• Bugfixes in web reports

Bugfixes:

• Windows 2008 is now properly recognized
• Application Scheduler event log logging could not be switched off
• "Monitor Realtime" would have to be checked in File Monitoring feature
• Both Syslog daemon and Syslog TCP daemon were limited to packets of 1000 bytes size
• Maximum amount of binary data that is stored in database has been increased to 65kb (require SQL 2005)
• Required audit settings (process & logon tracking) would sometimes not be activated correctly
• Changing mappings of a log file definition without restarting the agent would result in collected data not showing up in reports

Bugfixes:

• Summary Emails containing more than 1024 events would be split into multiple emails
• Log File Definitions would not show up in web reports if no lookup fields were used in definition
• Print-related unique Citrix identifiers (starting with WI_.....) would be added to ESEventlogComputer table
• Application schedule details dialog would not read previously set timeout value correctly
• Add Filter dialog from built-in event viewer would should hidden packages
• Install & Configure Agent action would sometimes not start service automatically
• Standard reports can now be saved in Popular Reports

Bugfixes:

• Heartbeat Agent would not start with some evaluation licenses
• Refresh issue in built-in event viewer resolved

Bugfixes:

• Small enhancements and bugfixes in web reporting
• Monitoring more than 20 folders in file and log file monitoring would not work
• File Monitoring has been improved for better efficiency
• File Monitoring can now monitor sub-directories
• Deleting all computers from a group in the management console would sometimes not work
• Using variables with a database action would display error messages when saving the configuration
• Text size in feedback forms of management console has been increased
• Service and Heartbeat Service can be set to manual start from management console
• Fixed problem with size limitation in SMTP header
• Minor fixes and improvements in the management console

Bugfixes:

• Fixed bug with DFS Replication event log always showing up
• Fixed bug in database setup wizard for Oracle databases
• Added additional translations
• Fixed several bugs in web reporting

New Features:

• Database Setup Wizard now supports database connection strings and EventSentry Actions as a destination in addition to System DSNs
• Nessus Import Utility and reporting now supports XML files from Nessus v3 as well
• Web Reports: New "Network Status" overview page
• New SMTP engine now supports TLS/SSL connections
• Event Log Backup files can now be automatically compressed
• Line delimiter can now be specified for non-delimited files as well
• Actions now support a Limit feature
• Management Console can automatically check for new versions and patches
• Event Log Database Import utility is now called "Database Import Utility" and supports importing delimited and non-delimited log files
• You can now specify a router for a Heartbeat-Enabled group to suppress duplicate alerts when a router goes down
• Hardware inventory can now distinguish between logical and physical CPUs and show more detailed CPU information
• Web Reports: Computer Overview page supports automatic iteration between computers
• Web Reports: Weekly Logon Reports in Logon Tracking
• Web Reports: Ability to email event records and copy event records to the clipboard
• Web Reports: Calendar popup improved on newer browsers

Bugfixes:

• Improved SQL queries drastically improve speed of most searches on the web reports
• Detailed hardware inventory information (NIC, memory, etc.) would sometimes not be recorded correctly
• Host names / IP addresses of remote Syslog hosts would not be included in events or the database if the IP address of the remote host could not be resolved
• Resolved bug in environment monitoring dialog
• Computers logging on to Citrix or Terminal Servers would show up in the "Computers" field of the Logon Tracking page
• Active Directory Auto-Refresh: Computers that were removed from AD would not automatically be removed from the corresponding group
• Web Reports: Improved Correlation between logon and process tracking
• Web Reports: Several bug fixes in combination with MySQL, profile editor

Bugfixes:

• Events with no event message text associated with them would be written to a database with a timestamp of 1973 if they were queued by the agent
• Additional event log error logging for disk space feature
• Additional input error checking in management application

Bugfixes:

• Changes to performance monitoring counters would not be read on-the-fly by the EventSentry Agent under certain circumstances and a restart of the EventSentry service was necessary
• Fixes the index.asp that might have been corrupted by the 2.80.0.8 patch released previously

Bugfixes:

• $STR variables for insertion strings can be used in "Process Action" as well
• Fixed bug in "Process Action" where spaces are appended to command line
  Packages assigned to a computer only represented by an IP address would not work
• Adding filter strings in Syslog and Log File Monitoring dialogs would not be saved correctly
• GUI will self-repair if a configuration gets corrupted in most cases
• Agent does not register itself twice in Add/Remove Programs

Bugfixes:

• Log File Monitoring would not work if both an environment variable and a wildcard is used in a file name

Bugfixes:

• A handle leak in the Heartbeat-Agent was fixed
• A temporary file size larger than 4095Mb (Global Options) would not work
• Insertion variables ($STR1, $STR2, etc.) will now resolve to empty strings when no insertion strings are present in an event
• Duplicates of events would be cached when a database is temporarily unavailable
• Specifying multiple MSSQL databases in a filter could cause the agent to crash
• IP addresses were not resolved in event log messages generated by the syslog daemon
• Specifying the IP address for computers would cause Remote Update to fail
• Showing/Hiding features in the management console would not work for Health/Tracking packages
• The management console can now be configured to automatically refresh ActiveDirectory-enabled groups
• Log File packages can be hidden from the management console
• Deleting an action will not cause filters to be configured to trigger "All Actions"

New Features:

• Log File Monitoring allows you to monitor both non-delimited and delimited files. You can either consolidate content into the database or receive alerts based on text logged to the log files
• File Monitoring allows you to be notified when files in a monitored directory are changed (includes checksum hashes), and you can either track changes in the database or receive alerts
• Directory Monitoring alerts you when a monitored directory exceeds a preset size
• Jabber notifications allow you to send IM notifications, e.g. using Google Talk!
• The hardware inventory feature now includes detailed information about installed memory and available slots, installed network cards, optical drives and you can remotely power on computers using WakeOnLAN!
• Logon Tracking now includes more detailed information such as remote IP address, session connections/disconnections and workstation unlocks
• The heartbeat agent now supports recurring alerts
• As always we also fixed minor bugs and optimized various aspects of the agent to continuously increase the availability of the agents
• Two new wizards were added for the log file monitoring and for setting up thresholds
• A filter test utility has been added that allows you to test events against your filter rules by simply right-clicking an event in the built-in event viewer
• Insertion Strings of events can now be displayed in the subject of an email ($STR1, $STR2, ...)
• System Health features now include an "Alerts" button to easily create filters for events logged by the respective feature
• Package summary pages now include description of packages
• Hardware inventory feature can generate alerts when memory, CPU count or number of installed drives change

Bugfixes:

• Custom event log settings are now completely transferred to remote machines when pushing the configuration
• Some events would not be transferred correctly with the SNMP action

Bugfixes:

• An updated SNMP engine fixes problems with invalid SNMP traps
• The "Mini" SMTP target would append the computer name incorrectly in some cases
• Copying and pasting SMTP target with a header/footer configured could crash the management console
• On multi-homed machines, an updated SNMP engine now shows the IP address of the interface where a SNMP trap was sent out.

Bugfixes:

• Web reports (Event Search) would show long strings in wrong places after an EventSentry agent was temporarily unable to write to the database
• Management Console would generate an application fault when installed on a logical drive formatted in FAT32

Bugfixes:

• Remote Update would not transfer settings from fields that contain more than one line (filter text, filter notes, SMTP header and footer)

Bugfixes:

• Fixed and enhanced internationalization support, encodings can now be configured in EventSentry and the web reports
• Timeout in the SERVICE target has been increased to 5 minutes when restarting services
• Fixed problem with backup notifications, where an invalid line in a temporary file would cause the agent to use a high amount of CPU time
• Fixed problem in the dashboard

Bugfixes:

• A large amount of events (e.g. 20/sec) would cause the EventSentry agent to use a large amount of CPU time
• Connecting to a remote computer that has an IP address configured would not work correctly
• EventSentry agent would cause the floppy access light to blink on some machines every 60 seconds when disk space monitoring was enabled
• Fixed problem when dragging computers into different computer groups

Bugfixes:

• Fixed problem with updating configuration on remote hosts that have been assigned an IP address
• Deleting a target could reconfigure heartbeat and/or tracking database settings
• Disk space dialog would not retain drive-based settings
• Fixed bug in index.asp page with Access Database
• Fixed problem when saving standard reports on MySQL Database
• Added BIOS/SerNr information to dashboard
• Fixed problem in certain print reports

Bugfixes:

• Fixed problems with remote syslog settings not being saved
• Fixed problems with system information and WMI
• Updated welcome wizard

Bugfixes:

• Added preliminary support for Vista RC1
• Fixed bug in WMI hardware detection
• Connecting to a remote x64 host might display an empty configuration
• Remote update would remove syslog configuration on remote host
• Fixed problem with copying a timer filter
• Fixed various bugs in web reports
• Message file (eventsentry_msg.dll) is now incorporated into eventsentry_svc.exe file

New Features:

• Remote configuration updates do not require the Remote Registry Service anymore, but instead use the ADMIN$ share. A work-around without the ADMIN$ share exists
• Remote update shows the total and average time it took to perform an action in the status bar
• Event Log Backup Files (.evt) can be imported into the EventSentry database
• An event browser lets you browse for all installed event log messages on a system
• Two wizards where added to accomplish common tasks
• Disk space alerts are now cleared after an alert, the volume name is also shown in alerts
• Disk space web-reports can be filtered/grouped on the group level
• Speed of performance charts was improved significantly
• Expanded the "toggle" functionality to most search pages
• A user-configured IP address will now be used on the web reports

Bugfixes:

• Deleting a database target could incorrectly configure the notifications of existing health and tracking features, including notifications set on the package-level
• Remote update would not work correctly when the EventSentry was not installed locally
• Creating a new package and immediately configuring it to be global would not work
• The automatic configuration backup feature would not correctly delete old files
• A temperature-only sensor could not be configure for a position other than 1
• The temperature and/or humidity sensor would not work correctly
• Remotely connected event logs would sometimes not be restored correctly
• Filters and folders with the same name would crash the GUI
• The event log summary dialog would display incorrect data when connected to remote hosts
• Finding Event IDs works correctly now
• Creating multiple SNPP target notifications was not possible
• Resolved problems with event reports on SQL Server 2005
• Resolved problems with IP address lookup
• Resolved problems with the performance reports
• "Update Configuration" feature would not work for x64-bit target systems when the host machine would run Windows Server 2003

New Features:

• Filter Timers for event-log relation
• Additional hardware sensors: Motion-, Smoke- and Water sensors
• Nessus reporting support
• Database purge utility (command-line based)
• Installer now supports MySQL
• Agent: New Shutdown/Reboot and Service Control target
• Agent: Support for more runtime variables in SMTP Header/Footer
• Heartbeat Monitoring: Ping tracking
• Heartbeat Monitoring: Maintenance schedule can be accounted for in uptime statistics
• Improved hardware inventory (now also detects serial numbers, model and graphic adapter/resolution)
• Remote Update utility to automate remote update tasks
• Improved dashboard
• Ability to save the configuration as a HTML file
• Maximum temp file size mechanism change
• Various improvements in the web reports

Bugfixes:

• Pushing the agent to a remote host running the x64 edition Windows Server 2003 would sometimes not work
• Fixed problems with application scheduler that would not execute certain files properly
• Fixed various small bugs in management console application
• Fixed problem with certain threshold settings
• Fixed bug with performance monitoring
• Fixed XSS vulnerability in web reports
• Fixed minor issues in database setup wizard
• Fixed problem with event log backup assignments
• Fixed problem when computers where added with FQDN instead of NetBIOS name

New Features:

• New "Remote Update Utility" eventsentry_upd.exe allows for remote update to be scheduled through the command line
• TEST button for SMTP notifications shows more information

Bugfixes:

• Disabled packages would still be executed by the agent
• Event Log form in Access database was linked to an non-existing table
• Upgrading from 2.60 to 2.70 could cause problems when "3rd Party applications" where present
• "Cancel" would not interrupt a running remote update
• Some reports in the web reports would not display correctly as RSS feeds
• Several small problems in resolved the performance web reports
• Disk reports and software history would sometimes not display when using MySQL
• Fixed several other small issues in GUI and agent
• Ping status would not be reported correctly by the Heartbeat agent under some circumstances

New Features:

• New option optionally reduces network traffic when pushing configuration updates

Bugfixes:

• EventSentry agent would not resolve numbers inside some event log messages correctly
• Messages queued in back queue would not be resent after the agent starts or after the configuration was saved
• Some special characters in OU strings caused problems with AD import/linking
• Minor bugfixes in dialogs
• Hiding/Unhiding packages would sometimes not work
• Disconnecting from a remote host would hide computers in remote update
• EventSentry Heartbeat Monitor would incorrectly report an unavailable computer as up and running
• The EventSentry Heartbeat Monitor would not correctly update the HTML status file under certain circumstances
• Web Reports: Disk Reports would not display on MySQL

New Features:

• Management console now supports filter, health and tracking package for easier and more flexible administration
• NETIKUS.NET offers standard filter and health packages that can be updated directly from the management console over the Internet
• Performance monitoring to track performance information (e.g. CPU usage, memory usage) in a database and/or receive performance alerts via notifications (e.g. email)
• Filter packages can be configured to be automatically active when one or more services are installed
• Environment monitoring now supports temperature and humidity ranges and also clears previously issued alerts
• Pager support for paging providers that support the SNPP protocol
• Service monitoring now includes database support, allowing you to query service status, history and uptime through the web reports
• Autorun Monitoring is now called "Software Monitoring"
• Software inventory is now included as Software Monitoring now includes database support. This allows you to query installed applications and installation history through the web reports
• Software monitoring also monitors the ActiveSetup registry key
• 3rd Party Application is now called "Application Scheduler" and supports running custom monitoring tasks in a recurring fashion, e.g. every 30 seconds.
• Logon tracking monitors logon's and logoff's, enabling you to view detailed logon/logoff information about users through the web reports
• Print tracking monitors all print jobs and allows you to see print job data and statistics through the web reports, including the ability to assign cost to print queues for invoicing
• The threshold feature has been simplified and offers new features
• The built-in event log viewer supports opening .evt files, you can also open .evt files directly from explorer
• Remotely connected event logs can automatically be restored after restarting the management console
• The remote update computer list can automatically be sorted
• Heartbeat agent now supports maintenance schedules that can be set for individual computers and/or groups
• Management console supports searching for filters and computers
• Management console can automatically backup the entire configuration at preset intervals
• The completely redesigned web reports now offer a dashboard, event log reports, a profile editor, a maintenance wizard and much more!

Bugfixes:

• Reduced size of configuration in registry for faster remote updates
• Increased agent stability
• Fixed problems with moving and cutting/pasting filters
• Several problems in the web reports have been fixed
• Duplicate computers cannot be entered anymore and no longer cause problems with the heartbeat agent

Bugfixes:

• Only three (of eight) custom event logs are configurable in the management console
• Threshold feature, when configured for a "1" maximum, might crash agent

Bugfixes:

• Summary notification with ODBC targets might crash agents
• The presence of the HKLM\Software\Wow6432Node key on a 32-bit machine will cause the EventSentry management application, agent and heartbeat agent to load an empty default configuration

Bugfixes:

• Memory leak in threshold feature (with event-based thresholds selecting the message text)
• Inaccurate threshold when setting limit to 1
• Other minor bugfixes in both the service and management application

Bugfixes:

• Handle leak in Autorun Monitoring
• Pool Nonpaged Bytes and Pool Paged Bytes in Autorun Monitoring
• Handle leak in SNMP notification target
• When launched from a folder with only a single ACE, EventSentry will remove all permissions

New Features:

• SNMP Support (sending traps)
• Monitoring of application installation/uninstallation
• Monitoring of machine-based autorun registry keys and directories
• Web reports now feature an uptime calculation page
• Ping option for remote update can be toggled
• System health options can now be set to block inheritance
• Process Monitoring can be configured to start after X seconds
• Various enhancements in the management application, including proxy server support for feedback and news feature
• Added ping dependency in heartbeat monitoring
• Added additional monitoring options in heartbeat monitoring
• Added database backup feature (if database is temporarily unavailable) to heartbeat monitoring
• Agents installed through remote update can now be uninstalled on target machines using "Add/Remove Programs"
• Desktop target notification now supports remote hosts in addition to the local host
• "Online Configuration Update" feature was improved for higher stability
• Map IP address to alias in remote update
• Changed MSI installer from Wise to InstallShield for higher stability and more future features
• PHP web reports are no longer available

Bugfixes:

• Some SIDs were not resolved to usernames correctly
• Clicking on the "Computers" container would show a wrong path in an error message
• Computers would randomely not show up in the web reports computer list
• Saving the configuration would increase the memory usage on the agent, without freeing it (~200kb)
• Some processes in "Process Tracking" would incorrectly show up as "still running" when they had exited
• Bootscan feature of Process Tracking would not record all activity correctly
• Recurring event filters would not work 100% correctly when a schedule would end exactly at midnight
• SMTP Footer would not appear in Mini Emails
• Under certain circumstances on very busy event logs (e.g. security event log on domain controllers) some event records would be skipped and not processed
• The agent would crash under special circumstances when using the summary notification feature
• When clearing an event log the agent would not continue to monitor this log
• Fixed various issues with SP1 of Windows Server 2003
• Various bug fixes in the management application
• Various bug fixes in the agent
• Fixed problems in combination with DEP (data execution prevention) in SP1 of Windows Server 2003
• Various fixes in the installer, including ability to run installation on Windows NT 4.0

New Features:

• Temperature & Humidity monitoring with external device
• Heartbeat monitoring of remote hosts (ES agent monitoring, PING and TCP port checks)
• Local computername may now be added to remote update list
• ODBC Target supports ODBC connection strings in addition to DSN names for easier deployment
• "Audit Process Tracking" can now also be switched off through "Process Tracking" feature
• Recurring event feature lets you define events that you expect to appear (such as a tape backup) during a certain time period, and become notified if they are not
• Computer field added to event log filter properties
• Event Log Backup feature now supports environment variables in file name
• Event Log Full detection now also supports the ODBC, NET SEND, SYSLOG and DESKTOP targets
• GUI: Event Log Viewer supports sorting
• GUI: Remote Update results window allows for sorting
• GUI: Remote Update also sends computer names
• GUI: Remote Update "Computers" container supports sorting and drag/drop
• GUI: Targets support drag/drop
• GUI: Active Directory linked groups now show the actual computers under the "Computers" container and allow for authentication to be set on a per-host level
• GUIDs in event log records are resolved to display name
• Filter Source, Category and Users allow for multiple values, separated by comma
• Filter Source, Category and Users support negation with exclamation mark
• Binary data of events now also available in all notifications, GUI and web reports
• Additional variable support for the FILE target
• ASP and PHP Web reports now work with all supported databases (Access, MSSQL, MySQL, Oracle), the PHP web reports have been switched to use ODBC
• A new Database Wizard now creates all tables, indexes and permissions automatically on MSSQL, MySQL and Oracle
• The new MSI installer optionally creates a virtual IIS directory and/or sets up the MS SQL Server database automatically
• SMTP target now supports an optional header and footer that can be added to every email
• Service Monitoring: Included/Excluded services now support wildcards
• Process Tracking: Included/Excluded processes now support wildcards

Bugfixes:

• Database layout completely redesigned for faster web reporting
• Event Log Scanning engine significantly improved
• Memory Leak in filter processing removed
• Absolute diskspace limits now work for values > 4Gb
• Selecting a particular set of logical drives would not work
• ASP Web pages corrected to support Access databases without restrictions
• ASP Web pages corrected to support non-US date formats
• Threshold feature incorrectly counting excluded events towards limits
• Filtering of "Filter Text" would not work correctly when filter text attempted to match the last character of an event log record
• Password for group (remote update) not saved correctly
• GUI will not allow more than one instances anymore on computers running Terminal Services to avoid data corruption
• GUI will not freeze while performing remote updates and switching to another application
• Several bug fixes in ASP and PHP web reports
• Unsupported characters were allowed in filter names, resulting in configuration corruption

New Features:

• Process Tracking records all process activity in a database and allows you to see a process history on all monitored hosts
• Service monitoring can control services and maintain a set status. Failed services can now be automatically restarted
• Disk Space Monitoring allows for more granular settings for warnings and database connections
• Disk Space Monitoring will now recognize when new (fixed) disks are added or removed during runtime
• Event Log Backup allows for backups of all event logs for faster configuration
• Database table names can now be specified for each of the features requiring a database (ODBC target, disk space trend collection and detailed process tracking)
• GUI: "Force News Update" reloads latest news
• GUI: Filters can be commented

Bugfixes:

• Critical handle leak in eventsenry_svc.exe (nonpaged pool leak)
• Memory leak in NonPaged pool when using the TCP syslog target and remote syslog host is not accepting TCP connections
• Launching applications with the "3rd Party Applications" feature might show error "Invalid access to memory location" and the application would not run.
• An error with the summary notification feature could crash the application when a large amount of events (more than the configured maximum) were summarized.
• Right-Click on SYSTEM event log in tray icon opens security log (no other logs are affected)
• Other minor bugfixes in service and GUI

New Features:

• Added $HOSTNAME variable to event log backup feature

Bugfixes:

• Warning messages in PHP interface removed
• Wrong $DAY, $MONTH and $YEAR variables in event log backup feature
• OLE DB error in index.asp file removed when using an MS Access database

New Features:

• Tree in navigation pane restructured for easier navigation, general usability improvements
• Maximum groups, targets were increased
• Active Directory Import (with "Link" feature) added
• Up to 5 remote event logs can be added to navigation pane
• Change detection added, GUI tries to determine whether changes were made and only prompts to save then
• Event Log Viewer filter added (filter for errors, warnings, information, audit success & failure)
• Only active group is sent to remote computers with remote update
• One-Button remote agent installation
• Tree status is now also saved/restored when connecting to remote computers
• ODBC target has a test button now too
• Mini-Emails can now be customized
• Dial RAS connections before sending emails
• This target has been optimized and should offer higher throughput
• Custom variables are introduced, variable processing improved
• Variable $EVENTMESSAGE for SMTP subject added
• Automatically backup and clear event logs on a regular basis
• Run command-line applications and log their output to the event log
• Monitor memory consumption of processes to detect possible memory leaks
• Monitor diskspace, including trend change detection
• Trial Version & Full Version are now one product

Bugfixes:

• Remote Update: Health settings of a group could be deleted when only updating filters
• Service Monitoring would not save changes when adding services that don't exist on local machine
• Feedback forms do not disappear when connection was unsuccessful
• Renaming groups could yield random results
• Filter processing has been optimized
• Some boot time events could be ignored
• Formatting of event log records has been corrected and improved
• SMTP message now contain a Message ID
• Memory leak in trial version resolved

New Features:

• EventSentry now monitors services
• Small enhancements in the management interface
• Filter Groups are now referred to as "Groups"
• Filter Groups can be added/removed in Remote Update, System Health and Filters tree
• PHP version of web interface added (ASP + PHP now supported)
• Added links to eventid.net, google, etc. to web file
• Sylog facility/level now mapped to event category for incoming syslog packets

Bugfixes:

• Long date format problem in event viewer resolved
• Rename problem in GUI resolved
• Import Problem in GUI resolved

New Features:

• Syslog target now supports TCP in addition to UDP
• Remote Update speed improved
• Remote Update displays more informative error messages
• Remote Update now supports different credentials
• Added troubleshooting section in help file and GUI for every target
• Numerous enhancements in the management application
• Added EventSentry Quickstart Guide

Bugfixes:

• Event records containing a single dot per line could cut off email
• Potential problems in wildcard feature
• Problem in built-in Event Log viewer with certain events resolved

New Features:

• (X)HTML emails are sent in multipart/alternative including a non-HTML version of the content. This is useful for email clients that are not capable of displaying HTML messages and for filtering (rules) in MS Outlook
• Wildcard support for filters was added
• The following additional variables for the SMTP target were included: $EVENTSOURCE, $EVENTCATEGORY, $EVENTTYPE, $EVENTID
• The $HOSTNAME variable is now supported in the SMTP Sender email field
• The built-in event log viewer allows you to query web sites to obtain information on a particular event
• Installer features (Management package) improved

Bugfixes:

• The syslog hostname (as logged & reported by the syslog daemon) was truncated
• The welcome screen might show an invalid event log summary when connected to a remote machine
• Day/Time summaries are sometimes not read correctly on the fly, a service restart is necessary
• Changing the debug logging level requires a service restart
• Various improvements in the management application

New Features:

• Customizable Welcome Screen shows important information such as event log summary and more
• Display speed of the built-in event viewer was greatly improved
• Invalid filter order is detected by management interface
• Some menu options renamed for improved usability
• Sample ASP pages for querying a ODBC database were added
• On German Operating Systems EventSentry logs German messages to the event log

Bugfixes:

• Service (agent) underwent a major security code review
• Memory usage reduced and optimized
• Exclude filters using more than one target would not exclude events properly
• Drag & Drop would sometimes not work properly
• Creating filters or targets would fail when clicking with mouse instead of hitting enter
• Remote update would sometimes not connect to certain machines
• Import wizard would only show ~250 computers
• Size & positioning issues with desktop notification feature were corrected
• Potential problems in the network target have been resolved
• Problems with the summary notification have been resolved

New Features:

• Custom event logs can now be managed and monitored

Bugfixes:

• Fixed problems in the built-in event viewer
• Other minor fixes / optimizations

New Features:

• Added checkbox functionality for remote update
• All filter groups can now be updated at once

Bugfixes:

• Fixed problems in the remote update feature (including service installation)
• Fixed problems in built-in event viewer

New Features:

• Added installer software
• Completely redesigned the GUI (graphical user interface)
• Filters can be assigned to multiple targets
• Smtp target enhancements
• Added network target (ala net send)
• Added process target
• Added sound target
• Added desktop target

Bugfixes:

• Permanent summary notification on Windows NT4 might not work due to missing %TEMP% variable

New Features:

• Summary features events are now stored through service restarts, filter option "Filter Text" is not case sensitive anymore

Bugfixes:

• "Stop processing other filters" didn't work in combination with summary feature under some circumstances
• Other minor bug fixes

New Features:

• Targets can now be enabled/disabled, multiple concurrent instances of the GUI are prevented

Bugfixes:

• The "stop processing other filters" option didn't work correctly under some circumstances
• Bootscan would report too many events under some circumstances
• Using ODBC with a MS SQL Server would sometimes not write events to the database
• Excluding filters for particular targets would under some circumstances not work

New Features:

• no new features

Bugfixes:

• The filter summary dialog box is cleared/reset under some circumstances
• A filter group update does not correctly set the active filter group on the target computer
• Sending emails with certain mail servers would fail.

New Features:

• Introduced filter groups (see help for an explanation)
• Added the parallel ASCII-printer target
• Added email importance flags
• Added/improved computerlist import/export
• Added GUI tips

Bugfixes:

• A special kind of eventlog entry could crash the service
• Database DATETIME field was not used (text was used instead)
• Eventlog entries would sometimes be ignored
• Fixed GUI ALT-F4 issue
• Other minor fixes in both GUI and service

New Features:

• Added the $HOSTNAME variable for the SMTP subject and FILE filename
• Added HTML customization options

Bugfixes:

• If an eventlog is configured to "overwrite events as needed" and events are being overwritten (because the eventlog is full) then EventSentry can stop monitoring this particular eventlog under certain circumstances. All customers are encouraged to update.

Bugfixes:

• Under some circumstances the GUI could crash when performing any kind of batch update. The EventSentry service is not affected by this problem.

Bugfixes:

• This is the inital public release of EventSentry.