{"id":250,"date":"2008-01-05T17:40:31","date_gmt":"2008-01-05T15:40:31","guid":{"rendered":"http:\/\/contoso.se\/blog\/?p=250"},"modified":"2008-01-05T17:40:31","modified_gmt":"2008-01-05T15:40:31","slug":"matches-wildcard-in-ops-mgr-2007","status":"publish","type":"post","link":"http:\/\/contoso.se\/blog\/?p=250","title":{"rendered":"&#8220;matches wildcard&#8221; in Ops Mgr 2007"},"content":{"rendered":"<p>In MOM 2005 we could add advanced criterias\u00c2\u00a0and\u00c2\u00a0for example check if a event description\u00c2\u00a0included a special word, &#8220;matches wildcard&#8221;. In this post I will show you how to get the same feature in Ops Mgr 2007. I want an alert when a event with &#8220;unsucessfully&#8221; is written in the local event log.<\/p>\n<p>I have create a simple vbscript that writes two events to a local event log. The event ID and source are the same, and the description is almost the same, but one event includes &#8220;unsuccessfully&#8221; and the other one includes &#8220;sucessfully&#8221;. Now I want to get an alert only when events with\u00c2\u00a0&#8220;unsuccessfully&#8221; a written in the local event viewer.<\/p>\n<ol>\n<li>Start Ops Mgr Console, click Authoring<\/li>\n<li>Right-click Rules and choose to create a new Rule, create a Alert Generating Rules\/Event Based\/NT Event Log (Alert)<\/li>\n<li>Rule Type: Choose a suitable management pack to store your new rule, click Next<\/li>\n<li>General: Input a name, description and choose a suitable target, click Next<\/li>\n<li>Event Log Type: Choose which log, in my example events will be generated in the Application Log. Click next<\/li>\n<li>Build Event Expression: in my example<br \/>\nEvent ID. equals. 0<br \/>\nEvent Source. equals. WSH<\/li>\n<li>Click Insert and choose then &#8220;&#8230;&#8221; in the new parameter box. In &#8220;Select an Event Property&#8221; choose &#8220;Use parameter name not specified above&#8221; and then insert\u00c2\u00a0EventDescription , click OK<br \/>\nsetup the last parameter as<br \/>\nEventDescription. Contains. unsuccessfully\u00c2\u00a0 , click Next<\/li>\n<li>Configure Alerts: Configure a suitable alert, with some description. If you want the entire event shown in the alert description you can add $Data\/EventDescription$. Click Create<\/li>\n<\/ol>\n<p><img decoding=\"async\" src=\"http:\/\/www.contoso.se\/files\/Wildcard.jpg\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In MOM 2005 we could add advanced criterias\u00c2\u00a0and\u00c2\u00a0for example check if a event description\u00c2\u00a0included a special word, &#8220;matches wildcard&#8221;. In this post I will show you how to get the same feature in Ops Mgr 2007. I want an alert when a event with &#8220;unsucessfully&#8221; is written in the local event log. I have create &hellip; <a href=\"http:\/\/contoso.se\/blog\/?p=250\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[19],"tags":[],"_links":{"self":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/250"}],"collection":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=250"}],"version-history":[{"count":0,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/250\/revisions"}],"wp:attachment":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=250"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=250"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=250"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}