SCOM Monitoring RRS feed

  • Question

  • I monitor the event logs on my servers with a Rule to capture all Errors within the Application and System logs.  However I have also started adding to the Rules expression to NOT report on certtain alerts - e.g. Parameter 'EventDescription' 'is not equal to' 'Printer' to suppress alerts from the Application log regarding failure to map printers.

    My question is - Is my approach of capture all errors and filtering the correct approach.  Am I going to end up in a situation where there is too much stress being put on each Server Agent as it trawls through the Event Logs? Is there a cleaner method?


    Monday, March 22, 2010 3:01 PM