I am attempting to use trhe Windows Event log template to look for tw oservices that stop and then start with regularity.
I know that all the settings in the attached screenshot are correct, but I find that the component will not test green when I include the Keyword search criteria. If I remove that and test using only the EventID, it works fine. Even then, the statistical result does not match the number of occurrences that I count in the event log over the the 10 polling cycles.
Any suggestions?