Hi,
I want to use event log monitor to monitor some log entries on my servers. So my question would be - is it possible to leave event log monitor in failed state when it finds required event log entry or at least bring this monitor from failed to normal state when it finds another entry after the first entry? Because as for now I have not interesting situation:
Event log is tested if if entry is found, operator gets an e-mail and monitor turns red. But after next check it comes back to ok status and there is no possibility to visually see that monitor is in failed state. So it would be nice to be able to leave it in failed state till next entry is found(problem fix).
I thought to monitor hard disks mirroring status using various entries in event logs. Or is there any better solution for such task? Thanks.