Jaa


Including the event info in the alert description

When creating a Event Log unit monitor, you might want to include in the alert description the event information. Here are the expression that you can use in order to include the event information in the alert description:

  1. Publisher Name                   - $Data/Context/PublisherName$
  2. Event Number                      - $Data/Context/EventNumber$
  3. User Name                          - $Data/Context/UseName$
  4. Event Description                 - $Data/Context/EventDescription$

Comments

  • Anonymous
    October 23, 2007
    PingBack from http://msdnrss.thecoderblogs.com/2007/10/23/including-the-event-info-in-the-alert-description/
  • Anonymous
    November 05, 2007
    And if I want to match Event Description in monitor, what should I use? There's no such field to choose from drop down in monitor wizard.
  • Anonymous
    November 13, 2007
    Many of you know already that alert’s description can contain value of any of the properties of the data
  • Anonymous
    November 13, 2007
    Many of you know already that alert’s description can contain value of any of the properties of the data
  • Anonymous
    November 27, 2007
    Use the textbox selection and type in EventDescription (no space).
  • Anonymous
    January 04, 2008
    The comment has been removed
  • Anonymous
    January 21, 2008
    In our MOM 2005 environment, we called a script in response to an event being found in the application log. It would read the event description and pull certain parts out for the alert msg to keep it short and simple.  how is that performed in Ops Mgr?In MOM 2005,  we started out with'========================================' Get Event Description contents'========================================Set objSourceEvent = ScriptContext.EventstrMsg = objSourceEvent.MessageThe parse through the strMsg information to get what we wanted and make the alert.
  • Anonymous
    September 01, 2008
    I want to filter logon/logoff events by TYPE, looking for Interactive (Type 2) and RemmoteInteractive (Type 10) events.  Can anyone tell me what this field is called so that I can filter for it using "Select an Event Property" => "Use parameter name not specified above"?To that end, does anybody have a list of fields possible to use here?Thanks.