Trying to collect specific event ID from Windows 2008 or Windows 2008 R2 server and Spotlight does not find the event.
When trying to collect specfic event id's from a Windows 2008 server you enter the 'Source' name of the event in Spotlight but after running the test no results are found for that event.
When pulling event's from a Windows 2008 server spotlight does not query by Source name.
To query for a specfic event name and id do the following.
1) On the server where you are trying to collect events from open Event Viewer
2) Select the event you are trying to pull - i.e. System event log - Service Control Manager Eventlog Provider - event id 7036
3) Click on the Details tab
4) Expand System and under Provider there is a valu called [Name]
5) Make note of this name - in this example the [Name] value is Service Control Manager
This [Name] value is what Spotlight on Messaging query's on when scanning through Event Id's
Use this value when adding event id's to the test in Spotlight on Messaging.
