In an effort to keep things organized, I have templates for categories of servers. I have an Exchange template, a Web Server template, a Windows Server template, etc.
The Windows Server template is where I grab event logs, but I want to use that information for triggers in other templates. Like if I get a particular Exchange log warning, I want to check for it in the Exchange template, like this:
({Windows_t:eventlog[Application].logsource(MSExchangeIS Mailbox Store)}=1)&({Windows_t:eventlog[Application].logseverity(2)}=2)
but that doesn't work. Is there any way for a trigger to reference a template other than the one it lives in?
The Windows Server template is where I grab event logs, but I want to use that information for triggers in other templates. Like if I get a particular Exchange log warning, I want to check for it in the Exchange template, like this:
({Windows_t:eventlog[Application].logsource(MSExchangeIS Mailbox Store)}=1)&({Windows_t:eventlog[Application].logseverity(2)}=2)
but that doesn't work. Is there any way for a trigger to reference a template other than the one it lives in?
Comment