We are trying to setup a monitor for when there is an event in an exchange log monitor. Specifically we want to know if event ID 111 shows up in the Microsoft-Exchange-HighAvailability/Operational log. We can't seem to get this to work. Is there something unique we need to do because of the log being in a folder location? We have been testing with getting all Event IDs and can't retrieve from this location.
We also tried to use the Real-Time Event Log Viewer and can not pull up the Log, it only shows logs at the root of the Application Services and Logs folder.
