Previous Topic: EVENTCOMPUTER Statement—Specify a Local Computer for Windows Event LogNext Topic: EVENTID Statement—Specify the Windows Event IDs to Monitor


EVENTDESCRIPTION Statement—Specify a Windows Event Description

The EVENTDESCRIPTION statement specifies the description of the event as displayed in the Windows Event Viewer.

Supported Job Type

This statement is optional for the Windows Event Log Monitoring job type.

Syntax

This statement has the following format:

EVENTDESCRIPTION event_description
event_description

Specifies the event description as displayed in the Windows Event Viewer.

Limits: Up to 256 characters; case-sensitive

Note: Enclose values that contain delimiters (such as spaces) in double quotation marks.

Example: Monitor for Words Excluded in the Event Description

In this example, the event description must include the words conflict and state as indicated by the plus signs but must exclude the words deny, master, or browser as indicated by the minus signs. The plus sign is the default and is optional.

AGENT WINAGENT
EVENTLOG System
EVENTTYPE Error
EVENTDESCRIPTION '+conflict +state -deny -master -browser'

Example: Monitor for Words Included in the Event Description

In this example, the event description must include the words Normal shutdown. This example does not use the plus sign, and by default, the specified words are included in the search.

AGENT WINAGENT
EVENTLOG Application
EVENTTYPE info
EVENTDESCRIPTION 'Normal shutdown'