Thanks for the post about what you do. I thought I would add to the community and say what's happened at our place. I've just had a failure on our server RAID and it has had to be rebuilt. I copied the keywords you suggested "bluescreen,crash,dump,controller,raid,disk" and i didnt get a warning. The events created in event viewer are list below. I was hoping of using PCMonitor to warn me when hard drives failures, any ideas how we can capture the failures?
Log Name: System
Source: HpCISSs2
Date: 15/10/2012 15:50:41
Event ID: 129
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: computername
Description:
Reset to device, \Device\RaidPort2, was issued.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="HpCISSs2" />
<EventID Qualifiers="32772">129</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-10-15T14:50:41.904Z" />
<EventRecordID>3509648</EventRecordID>
<Channel>System</Channel>
<Computer>computername</Computer>
<Security />
</System>
Log Name: System
Source: disk
Date: 15/10/2012 15:57:21
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ?????????
Description:
The driver detected a controller error on \Device\Harddisk0\DR0.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="disk" />
<EventID Qualifiers="49156">11</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-10-15T14:57:21.530Z" />
<EventRecordID>3509670</EventRecordID>
<Channel>System</Channel>
<Computer>???????</Computer>
<Security />
</System>