I’m attempting to create a custom Windows event monitor similar to what Jonathan Almquist created in the following post: http://blog.scomskills.com/event-description-pattern-matching-with-minimal-impact/

The goal is to create an event monitor that will search the event description without using too much CPU.  I created the type definition and configured it but I’m still not seeing alerts.  Below is the code that I’ve created and loaded into OM.

Brett Chevalier selected answer
    • What is the issue you're having?
    • The issue is that I’m not picking up the error in the event log and flipping the health state or alerting. I can do an event create with everything that the monitor is looking for with no result. It would appear that I’ve done something wrong implementing the expression.