So, the new Monitoring functions are very cool. It will take quite some time to explore all the counters, processes, and services that we want to monitor.

What we'd really like to do, though, is to set thresholds on event log entries.

Example:

Security Login Failure Audit Even 529 - we only want to be alerted/alarmed if it occurs on a given machine more thanthree timesin5 minutes. Right now, it alerts us every time it happens, so we see an alert for every typo that usersmake when they login in the morning.

How can we do that with the new monitoring tools?


Legacy Forum Name: Event Log Monitor Sets with Thresholds,
Legacy Posted By Username: kentschu