I have an event log on 6 servers that needs to be monitored very closely and to do this I have set up an item, trigger and action which all works how it should. The issue I am having is each server has anywhere between 3 to 20 things written to this specific log each hour so the support team gets bombarded with emails at the top of every hour. My question would be is there a way to merge all of these alerts into one email each hour? I do not mind if there is 1 email per server containing all the events from the past hour but getting upwards of 50 an hour is getting ridiculous.
I have tried to set the item to check every hour for new log entries and it would find them all and display them in the latest data but would only send the most recent entry in the email. I have since modified the item to check every 60 seconds so that it picks up each individual entry and then emails them all each hour. I also have the action set to email the variable {ITEM.VALUE} for each entry found. I could not find any variable that would would send all the item values, only the most recent one.
Anyone have an idea on how to solve this?
I have been contemplating just having the log entries written to a log file and then emailing the log file each hour with the new entries but I would like to avoid this method if possible.
I have tried to set the item to check every hour for new log entries and it would find them all and display them in the latest data but would only send the most recent entry in the email. I have since modified the item to check every 60 seconds so that it picks up each individual entry and then emails them all each hour. I also have the action set to email the variable {ITEM.VALUE} for each entry found. I could not find any variable that would would send all the item values, only the most recent one.
Anyone have an idea on how to solve this?
I have been contemplating just having the log entries written to a log file and then emailing the log file each hour with the new entries but I would like to avoid this method if possible.