There was a question in a news group about creating a rule to generate an alert if the alert description contains a special word. When you create a new alert generating alert/Event Based/NT Event Log (Alert)┬árule you can not choose alert descript as a parameter. Instead you will have to input a new parameter name, EventDescription. For example if you want a rule to generate an alert if the word “Pay” is in the alert descript the forumla would look like this ( EventDescription Contains pay ) .