Hi, My Event Log for Applications fills rapidly with the following Sysmon error log entryEvent Type: InformationEvent Source: SysmonLogEvent Category: NoneEvent ID: 2031Date: 04/06/2010Time: 16:29:14User: N/AComputer: xxxxxxDescription:Counter: \\xxxxxx\Processor(_Total)\% User Time has tripped its alert threshold. The counter value of 38.4375 is over the limit value of 5.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.BUT - there is no more help there, so how do i change this setting of '5' {5 whats no one knows} so i don't get this error report in my App Evt log every 5 seconds!! 1 person needs an answerI do too