Is there a way for an eventlog entry to trigger availability to be "UP" until the presence of a different eventlog and then go down?
For example if you see event log that say "task started" and later one says "task stopped" it would be "UP" that whole time?
Unfortunately I can't do it based on a process or service running because of the nature of the task.
or perhaps be based on memory or cpu utilization of a process? so if greater than 1% or 1MB then it's "UP", otherwise it's down?