Created triggered for monitoring event ID is not resolved.

[Tharakaw]

Hi All,
Below is the configured triggered to alert if the event ID is "1074" (This event is triggered if someone initiated the reboot or shutdown on Windows.)


Configured Item:







Configured Trigger:



This trigger is alerting if event ID is "1074" but not resolved. I am not sure whether my configured trigger is checking the last event ID. Please help me to generate the alert if last event ID is 1074 and if not to resolve.

Thank you.
Best Regards,
Tharaka

[singk]

This trigger is alerting if event ID is "1074" but not resolved. I am not sure whether my configured trigger is checking the last event ID. Please help me to generate the alert if last event ID is 1074 and if not to resolve.

This is how mine trigger looks like and it seems to trigger and resolved OK.

{SERVER:eventlog[System,,,,1074].logeventid(1074)}=1 and {SERVER:eventlog[System,,,,1074].nodata(5)}=0

[Tharakaw]

Hi Singk,
Thanks for your reply and able to fix it using below...
{Server:eventlog[System,,Information].logeventid(1074)}=1