Hello, we have been working on streamlining our monitoring and I've been tasked with eliminating some stray alerts. In particular, errors such as the following:
Log: SystemType: ErrorEvent: 11Alert Time: 2014-09-30 15:24:21ZEvent Time: 08:23:26 PM 30-Sep-2014 UTCSource: DiskCategory: NoneUsername: N/AComputer: REMOVEDDescription: The driver detected a controller error on \Device\Harddisk1\DR2.
What we would like is to be able to monitor for controller errors, but only on DR0 (the primary hard drive). Otherwise, we get alerts when someone removes a flash drive without ejecting first, etc.
Any suggestions on how this can be accomplished? Or, alternatively, what else could/should be monitored to verify disk health? We do have a chkdsk procedure that lets us know if errors are found there.
Have you tried using an event log alert with a description filter specifically for the primary hard drive?
Here is an example:
We did not have that set up. I have implimented that filter. It should solve the issue. Thanks!