I want to monitor a specific Windows Event Log ID
and fire a trigger when this Log appears in the last 24 hours.
I have right now a trigger that fires an alarm if the event log ID exists. But it wont disappear even if this log did not appear again on the server for days.
Item of Log type:
eventlog[{$NAME},,,{$SOURCE},{$EVENTID}]
Trigger Expression:
{Certificate Expiry:eventlog[{$NAME},,,{$SOURCE},{$EVENTID}].logeventid({$EVENTID})}=1
Halp pls
and fire a trigger when this Log appears in the last 24 hours.
I have right now a trigger that fires an alarm if the event log ID exists. But it wont disappear even if this log did not appear again on the server for days.
Item of Log type:
eventlog[{$NAME},,,{$SOURCE},{$EVENTID}]
Trigger Expression:
{Certificate Expiry:eventlog[{$NAME},,,{$SOURCE},{$EVENTID}].logeventid({$EVENTID})}=1
Halp pls