Event log rules - alert on all but exclude certain events
Hi, we use the eventlog monitoring rules and want to capture all critical events.
We can do this, however we often recieve certain events in the eventlogs which are classed as critical by the app logging it, but they are known to us and can be safely ignored - consequently we don't want the status of the monitor to be shown as warning or critical.
The logic we want to use in the rule is 'All events but Not event ID 1505' (for example).
How can we do this? At the moment all I can see is that you can either recieve all events, or pick the ones you want - the logic isn't available to say all but not these certain ones.
App mgr support can you advise please? Has anyone else managed to set this up?
We can do this, however we often recieve certain events in the eventlogs which are classed as critical by the app logging it, but they are known to us and can be safely ignored - consequently we don't want the status of the monitor to be shown as warning or critical.
The logic we want to use in the rule is 'All events but Not event ID 1505' (for example).
How can we do this? At the moment all I can see is that you can either recieve all events, or pick the ones you want - the logic isn't available to say all but not these certain ones.
App mgr support can you advise please? Has anyone else managed to set this up?
Topic Participants
app_support
New to M365 Manager Plus?
New to M365 Manager Plus?
New to RecoveryManager Plus?
New to RecoveryManager Plus?
New to Exchange Reporter Plus?
New to Exchange Reporter Plus?
New to SharePoint Manager Plus?
New to SharePoint Manager Plus?
New to ADManager Plus?