3 Replies Latest reply on Oct 19, 2017 11:37 PM by mesverrum

    Alerting on Windows Event Log Monitor - How to remove unnecessary texts from alert message ?

    mdangol

      Hi,

       

      I am setting up alert using Windows Event Log Monitor. The alert triggers as expected when there is certain event is logged. However it includes headers (LogName, Source, Logged, Event ID, Level, User, and Computer information) in the message as below. Is there any way to exclude the headers and just include real information?

       

      Example  (${N=SwisEntity;M=ComponentAlert.WindowsEventMessages}) -

       

      --- Event 1 of 1:

      Log Name: Application
      Source: test source
      Logged: 10/18/2017 14:10:00
      Event ID: 3003
      Level: Information
      User:
      Computer: xx

      Detected the shutdown of agent on machine

      I just want to include 'Detected the shutdown of agent on machine'.

       

       

       

      Thanks!