We are trying to get alerts when PowerShell is opened on one of our agent computers, but cannot figure out how to get the alert when the application is opened. Has anyone done this successful and is so how did you do it?
This requires the PowerShell 5.0 connector installed and make sure the Microsoft-Windows-PowerShell/Operational is added using the process
https://support.solarwinds.com/SuccessCenter/s/article/Configure-the-Print-Services-Connectors
the event ID is 4104 if you are wondering.
for mass deployment for endpoint I recommend setup a GPO to add the connector and with node group for deploying the connector in SEM.
Would like to know this as well
This worked, thank you for the help