Hi,

Our SCOM version is SCOM 2007 R2. I have tried all of the Windows Event monitors but did not see any of them have what I need to do. We have an application that throws Error events to its own custom event log with different ID's and same source. The events are usually repeated because of the nature of application. 

What I want to do is to generate an alert when an event is created and do not generate any more events for that specific ID for the next 8 hours. For example; if an event is created with ID 1, generate an alert and do not generate any more alerts for the following ID 1 events for the next 8 hours. If an event is created with ID 2, then do the same thing specific to that ID.

I know I can create time reset windows event monitors for each event id, but there are about 50 different event ids, so this does not seem like a solution.

This may be a rule or monitor, doesn't matter. Any suggestions welcome. Thanks.

• Edited by AndaTech 1 hour 49 minutes ago added SCOM version