SCOM monitor that checks the EventData

Hi all

I’m planning to create a monitor (Eventlog based) unhealty state is Log = System, Source = sdddsm, EventId = 5 and Level = Warning. In the EventData section there is a Device id, eq 81

Healthy state is Log = System, Source = sdddsm, EventId = 4 and Level = Information, but only if it’s the same Device id, here 81 the state should return to Healthy.

Is it possible to create a monitor that check this? I get these events with different Device id, so I have pair them together (Same Device id)

Thanks
Leif