when looking at the event logs, I've now got people wanting criteria/logic in alerting on that.
i.e. if this message happens > 2x in same polling cycle OR message in 2 consecutive cycles, then trigger
This would have to look at the actual message in table APM_WindowsEvent_Detail. Regex option would be best to be able to filter.
I suspect I can do with SQL, but this would be nice oob for those who aren't SQL savvy.