Hi,

i just wanted to set up a sensor using the following WMI Script:

SELECT * FROM Win32_NTLogEvent WHERE Logfile ='System' AND EventCode = '10010'

The problem ist, that wen using this query, sensor is always down, regardless the number of rows returned, but I want to have it in state ok, if no rows are returned!

Is there a possibility to set up a sensor, that only goes "down" when one or more row is returned, or do I have to use a powershell script (this is what I want to avoid in the first place!)

Article Comments

The problem is that the WMI Custom sensor doesn't work with counts. But you might want to try my historic windows events sensor :) Does exactly what you want. Everything ready at your hands, you only need to install it.


Jul, 2015 - Permalink