Return
-
Title
How to filter out specific Windows Event Log alerts in Foglight from being alerted on? -
Description
Don't want specific Windows Event Log alerts from being fired upon. How to filter out specific Windows Event Log alerts in Foglight from being alerted on?
-
Resolution
Admin Console | Administration | Agents | Agent Status | highlight Windows_System AgentName | Edit Properties | Modify properties for this agent - or All Windows_System agents |
From here you can:- turn entire Windows Event Log types (Application, System, Security, ect.) on/off being montiored = "Event Logs to Monitor"
- filter in/out specific events that the agent will detect and alert/ignore on = "Event Log Filter"click Edit on "Event Log Filter" | Add Row | choose 'Exclude' | filter down using the fields which event you want to ignore - the easiest way to do this is by choosing all asterisks except for EvenID field - if you have the specific EventID (look in Windows Event Log for specific EventID).