WinEvent Instance

Enter the appropriate information into the following fields.

Note: If you are assigning a Windows Event Log passive monitor type to a device, make sure that the device has credentials assigned before creating a passive monitor for it. For more information, see Using Credentials.
If want to use multiple Windows Event Log passive monitors, you must assign a unique Windows Event Log passive monitor for each device.

Note: The upgrade process to WhatsUp Gold from previous versions, automatically migrates Windows Event Log passive monitor credentials into the Credentials Library. If you experience upgrade problems with Windows Event Log passive monitors, look in the credentials library for the Windows (WMI) credentials that will work for the device. If the device credentials do not exist, create new credentials for the device. For more information, see Using Credentials.

Name. The name of the monitor as it appears in the Passive Monitor Library.
Description. The description of the monitor as it appears in the Passive Monitor Library.
Condition. This is a list of conditions to match. Only log entries which match these expressions will be converted to events. Conditions are processed serially from top to bottom. As each condition is evaluated, its results are applied to the next condition until all conditions have been evaluated. For complex sets of conditions involving both ANDs and ORs, this serial logic may produce different results than intended. As a best practice, we recommend keeping conditions simple by opting for multiple Passive Monitors over complex sets of conditions. When complex conditions are unavoidable, we recommend grouping all OR conditions together at the beginning of the set of conditions, followed by the ANDs.
Click Edit condition to add or edit a condition or Clear condition to remove it from the box.
Match Description On. You can click the Add button and this will take you to the Expression Editor where you can create your expression, test it, and compare it against potential payloads you can receive. After creating the expression, clicking OK will insert that string into the Match Description On list.
Note: If you have multiple payload Match Description On expressions, they are linked by OR logic, not AND logic. For example, if you have two expressions, one set to "AB" and the other to "BA", it will match against any log entry that includes either of the two strings.