Create two separate filters, that way you will have two different instances. Then set up your notification policy for each instance. Jon
Sent from my iPhone
the thing is how to create two different instatnces for two different event ids for the same server.
When we set up the policy what i can find is that the policy is applied on whole of "windows event id " instaed of individual even id. may am missing out something.
I think the solution is for PATROL. I have been using BEM, its not working for me.
You need to setup this filter Jon mentions in order to identify the related events in BEM and create a selector based on the identified events.
1) What are you using to monitor the events?
2) Do the events currently contain the Event ID?
- Is it on a slot by itself?
- Is it listed among the contents of a slot following a specific pattern?
Can you please post one of the events in question so we can assist you?
As I suspected, I don't see the actual event IDs anywhere on the event. All it shows is a count of how many of the monitored event IDs showed up.
Unless you can get the actual event IDs into the event, there is no way to say which one the event refers to and, consequently, which notification policy should trigger.