The event log monitor doesn't report accurately on the actual count of a particular event log. That's not it's purpose.I've confirmed this with support.
however I figured if we could figure out a script to query for an event log in the past 5 minutes we could use a script monitor instead.
Anyone know how to query Server 2008 event logs via vbscript or powershell and have it filter for things like Type (App, sys, sec), Source, EventID, Level (warn, crit, err, info), and a phrase in the content?
