SCOM custom event based rule to monitor Reboot, unexpected shutdowns and BSOD crashes – 2

See post 1 at “SCOM custom event based rule to monitor Reboot, unexpected shutdowns and BSOD crashes

On further testing I realised that event ID 1001 is logged on all events where a report is generated. Even on installs such as recently some Citrix servers had IE11 installed and generated this event therefore wrongly raising alerts of “Unexpected shutdown or crash”.

So I have removed event id 1001 from the rule. All for now over and out.

Advertisements
About

IT professional with wider interest in technology

Posted in Uncategorized

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: