Hi all,

I have a question in relation to event log entries and just want to see what people do about it. I know that I can monitor event logs and I can create event sets such as backup Exec events etc so that if any of these Event ID's appear then do the following.

My question is if I have a particular event ID such as Event ID 10000 - if this occurs I want to run a script. So I have to create an event set for event ID 10000. I assume from this that for every event ID that I want an action to happen I must create a seperate event set. So I am going to have absolutely tons of event sets to manage per machine.

Am I making work for myself here or is this the way people do it. If I go downt this route it means my workstation template is going to have tons of event sets associated with it.

Any body got any thoughts on this.



Legacy Forum Name: Monitor Particular Events versus group events,
Legacy Posted By Username: mmartin