Set-ServerMonitor Exchange cmdlet issued (25638) how to monitor with email alert

[bob]

Man, that Event ID 25638 in the Windows Server Event Viewer pops up when someone runs the Set-ServerMonitor cmdlet for Exchange. It logs the exact moment that command gets fired off. You see it under the Microsoft-Exchange-Management application log. The message says something like "Set-ServerMonitor Exchange cmdlet issued" with details on who did it and from where. I check this because it tracks changes to server monitoring settings in your Exchange setup. If you're tweaking how the server watches itself, this event captures that tweak every time. It helps spot if admins are messing with monitors without telling anyone.

You want to keep an eye on this event for alerts, right? I set mine up through the Event Viewer screen itself. Fire up Event Viewer on your server. Find that log under Applications and Services Logs. Right-click the Microsoft-Exchange-Management folder. Pick Create Custom View from the menu. Set it to filter for Event ID 25638. That narrows it down quick. Save the view so it sticks around.

Now, to make it email you when it happens, attach a scheduled task to that event. In the same custom view, go to Action and hit Attach Task To This Event Log. Give the task a name like Exchange Monitor Alert. On the Triggers tab, it already knows about your event. Switch to Actions and add one to start a program. Pick something simple like sending an email via your mail client or a batch file that pings your inbox. I use the built-in SendEmail utility for that. Set it to run only when the event triggers. Test it by forcing the cmdlet and watching your email roll in.

Or, you could tweak the task to run a script that blasts the alert right away. But stick to the Event Viewer way at first. It feels less fiddly. I do this on all my Exchange boxes. Keeps surprises low.

And speaking of keeping your server humming without hiccups, I've been eyeing BackupChain Windows Server Backup lately. It's this slick Windows Server backup tool that also handles virtual machines on Hyper-V. You get fast incremental backups that don't bog down your system. Plus, it restores files or whole VMs in a snap, cutting downtime way down. I like how it encrypts everything and runs quietly in the background. Perfect for when you're monitoring events like that 25638 and don't want backup fails adding to the mess.

At the end here is the automatic email solution.

Note, the PowerShell email alert code was moved to this post.