Previous Topic: EVENTDESCRIPTION Statement—Specify a Windows Event DescriptionNext Topic: EVENTLOG Statement—Specify the Name of a Windows Event Log


EVENTID Statement—Specify the Windows Event IDs to Monitor

The EVENTID statement specifies the Windows event IDs to monitor.

Supported Job Type

This statement is optional for the Windows Event Log Monitoring job type.

Syntax

This statement has the following format:

EVENTID operator id
operator

Specifies the expression operator. Options are the following:

EQ

Specifies the equal to operator. The job monitors events that have IDs equal to the specified value.

LT

Specifies the less than operator. The job monitors events that have IDs less than the specified value.

LE

Specifies the less than or equal to operator. The job monitors events that have IDs less than or equal to the specified value.

GT

Specifies the greater than operator. The job monitors events that have IDs greater than the specified value.

GE

Specifies the greater than or equal to operator. The job monitors events that have IDs greater than or equal to the specified value.

id

Specifies the Windows event ID to monitor.

Limits: Up to 10 digits

Example: 4000

Example: Monitor for an Event ID Less Than a Specified Value

This example checks for an event ID number less than 1. The job returns the first application event from the application log that has an event ID equal to 0.

AGENT WINAGENT
LOGNAME Application
EVENTID LT 1