Sort of new to SAM. I was looking to monitor SYSTEM event log for event 1074. I opened up the realtime event log monitor on one of my servers, found the event and choose "Start Monitoring this event". When i hit TEST it tells me it did not find any events. My polling is agent based and happens every 2 minutes. I changed the "Number of past polling intervals to search for events" to 3. So from the documentation that should be in past 6 minutes.
This event is triggered when a machine is rebooted. So i rebooted my system, and when it came back up I hit TEST to make sure component monitor would trigger. And it's not. It says "NO event(s) matched the specified criteria.
