From my readings on which Windows events to monitor, I cannot find references to where MSP are monitoring these two events:. Event: 20 - Windows Update Agent - Windows failed to install the following update with error Event: 11729 - MsiInstaller - Configuration failed I realize that these event generate a lot of 'noise', but should we not be monitoring and remediate?
allanc275 , The key word is “noise”. I would suggest that you set up an event set monitor, but only use the Alarm. Let it run for a month, and then go back and see how many events were generated. Then decide if the monitoring is worth the amount of tickets that are created.
I actually triggered Emails to a Gmail account instead.For 50 PCs there were 119 Event=20 and 82 Event=11729.I agree that this is a large number of occurrences to deal with.However, should the number of occurrences be the most important factor to consider?For example, we would not want to consider 200 occurrences, or even a much smaller number, regarding HD errors to be 'noise'.We would want to be alerted and then work towards resolutions, correct?
I think that what I am asking is why are the following ignored, regardless of the number of occurrences?
Event: 20 - Windows Update Agent - Windows failed to install the following update with errorEvent: 11729 - MsiInstaller - Configuration failed
If there was only one occurrence, therefore not considered 'noise', how how would we resolve the two events?