Is there any way to monitor a single Event ID inside the Event Log when it shows up at least three times in one minute? Thanks.
I'm not aware of any way of suppressing an alert unless the same Windows Event ID is seen in the Windows Event log three times in one minute using APM's Event Log Monitor. However this is a fairly trivial task when using the Free Log Forwarder for Windows and a simple Syslog rule.
Interesting that you offered this as the solution - it is the same solution I offered to someone else many months ago but I chose to use the APM Template which appears much easier.
I've opened a case on the APM Template. After all this template is suggested in the APM admin guide but it doesn't appear to work.
We have a gotomeeting later this morning so maybe we'll work it out. Thanks for the reminder of the Log Forwarder - it really does work as you've recommended.
We got the APM TEMPLATE "Windows Event Log Count" working. Somewhere along the way the template was corrupted.
We found that within the body of the vbscript, where there should have been > it was instead >
or else where it needed < it was instead < etc etc....so we changed all these and re-tested and it worked great.
