Okay all you SAM Geeks. I have an issue that I have not been able to overcome so I need your vast knowledge. I'm trying to set up a Windows Event Log monitor to monitor the deep TaskScheduler log. To be specific I'm wanting to set up the monitor to monitor the "Microsoft-Windows-TaskScheduler/Operational" log. This is not one of the top level log e.g. Applications, Security, System... My goal is to look for a specific eventID in the "Microsoft-Windows-TaskScheduler/Operational" and if present send an alert. I can get the Windows Event Log Monitor to work on any of the top level event logs, but not on any of the logs under Application and Services Logs > Microsoft > Windows. Has anyone ever had any success with this. I know there is a scheduled task monitor and I'm using that. But the scheduled task monitor does not tell you is an underlying task e.g. PoSh script launched successfully. The Scheduled Task monitor only tell you is the scheduled task started and completed successfully. I have attached a screen shot of the monitor settings NOTE: Credential for Monitoring left
out purposely. Thanks in advance for your assistance
