Eventlog working but triggers too many times
Hi.
I am using 2.2 and trying to get a monitor to run correctly.
Worked fine in 1.8, but after importing, I would get evaluation errors.
So, I made this trigger using Print Spooler service as my test:
{Test_EVT_TEST:eventlog[System,Spooler,,,,,skip].nodata(600)}=0
Basically looking at the System log and to notify when the event description has "Spooler" in it and skip old data.
It appears to run OK. If I stop or start the service to generate something in the System log, it also works. However, it generates several events for the same thing or past info. Unsure to be honest, but I cannot seem to get it to trigger once and only once when it sees a new event.
What exactly am I missing?
Thank you
I am using 2.2 and trying to get a monitor to run correctly.
Worked fine in 1.8, but after importing, I would get evaluation errors.
So, I made this trigger using Print Spooler service as my test:
{Test_EVT_TEST:eventlog[System,Spooler,,,,,skip].nodata(600)}=0
Basically looking at the System log and to notify when the event description has "Spooler" in it and skip old data.
It appears to run OK. If I stop or start the service to generate something in the System log, it also works. However, it generates several events for the same thing or past info. Unsure to be honest, but I cannot seem to get it to trigger once and only once when it sees a new event.
What exactly am I missing?
Thank you
Comment