Event Log Notifications filter by EventData info

[CraigGoulding]

Hi,

We have just installed the software and have been looking at the Event Log Notification feature. We want to be able to send a notification if a backup routine is successful.

Looking through the event log i can filter by the Event Source, but there are around 10-15 events fired per backup routine with the same Keyword & Event ID. The unique identifying log is by a value within EventData, as we only want to be notified if the backup fails.

Is there anyway of adding to the filter to look at the contents of EventData. Example below. (Info 6C8F1F7F)

- <Event xmlns="[url="http://schemas.microsoft.com/win/2004/08/events/event"]http://schemas.microsoft.com/win/2004/08/events/event[/url]">

- <System>

  <Provider Name="Backup Exec System Recovery" />

  <EventID Qualifiers="0">100</EventID>

  <Level>4</Level>

  <Task>1</Task>

  <Keywords>0x80000000000000</Keywords>

  <TimeCreated SystemTime="2012-04-04T21:59:37.000Z" />

  <EventRecordID>79745</EventRecordID>

  <Channel>Application</Channel>

  <Computer>Chaos</Computer>

  <Security />

  </System>

- <EventData>

  <Data>Info 6C8F1F7F: A scheduled independent recovery point of drive C:\ was created successfully. Details: Source: Backup Exec System Recovery</Data>

  </EventData>

</Event>

Thanks,

Craig

[Marius]

You cannot set a filter on event data with the current version - we are considering adding this in a future release.

[MarcelBrabetz]

Hello Marius,

 

any updates on this topic, because at the moment i cannot see the possibility to check for event data field.

 

Thanks

Marcel

[Paul]

You can build a plugin that monitors the events and notifies you if the event data contais what you need.

 

You can get started with plugins here.

 

If you need any help you can ask here.