Alerting on Windows event log with matching detail

Question

Hi community,

I have a windows event log monitor set up as following

and it is giving alerts on both the following as both have the same Event ID but have different Event Details,

I only want it to alert us on the following which has the following details, is it possible to do set it up to check the following in the event details such as string "szErrorMsg = [Microsoft][ODBC SQL Server Driver]Communication link failure"

or if there is another way I could set up this monitor,

Any suggestion and advice is highly appreciated,

Kind Regards

jrouviere · Accepted Answer

You likely want to be using the option to Include Events and change that dropdown to "With Keywords Below" and include the string you're looking for: "szErrorMsg = [Microsoft][ODBC SQL Server Driver]Communication link failure"