I am looking for a way to De-Duplicate similar events.
We currently monitor the event log for Event ID 6008, 1001, and 41.
Is there a way to de-dupe only these 3 events into one ticket automatically.
EG "Microsoft-Windows-Kernel-Power in System log generated Critical Event 41" often appears at the same time as "EventLog in System log generated Error Event 6008" and "BugCheck in System log generated Error Event 1001"
These 3 events are related to the same problem so it would be good if all 3 events appeared in 1 ticket.
HI Brad .. I know exactly how to do this but if you could send me a private message I'll explain as we do this on a commercial basis as part of MSPAssist and I'd rather not make out methods " too" public