When I try to scope this I have the option for the class which is fine (Windows Domain Controller) but I just want to the alerts associated with a specific rule I created for letting me know when a particular non-security group is changed (event id 5136 and a description setting).  How do I do this?



Gary Jackson answered