Repeating event monitor alert description variables don’t work


 

This is current as of RC-SP1 version of OpsMgr 2007.

When you create a repeating event monitor, and use the GUI to add in some Alert description variables, such as event ID, Description, etc... you will find that they do not work.  Below are the correct variables to use for repeating event monitors:

 

EventDisplayNumber (Event ID):              $Data/Context/Context/DataItem/EventDisplayNumber$

EventDescription (Description):                $Data/Context/Context/DataItem/EventDescription$

Publisher Name (Event Source):               $Data/Context/Context/DataItem/PublisherName$

EventCategory:                                      $Data/Context/Context/DataItem/EventCategory$

LoggingComputer:                                  $Data/Context/Context/DataItem/LoggingComputer$

EventLevel:                                            $Data/Context/Context/DataItem/EventLevel$

Channel:                                               $Data/Context/Context/DataItem/Channel$

UserName:                                            $Data/Context/Context/DataItem/UserName$

EventNumber:                                        $Data/Context/Context/DataItem/EventNumber$

Comments (5)

  1. lyndon grierson says:

    Hi,

       Thanks for this. Using $Data/Context/Context/DataItem/EventDescription$ I can get the alert description to print in the alert now. My problrm is a bit deeper than that. I need to configure the repeat settings to count instances where the event description or a portion of it is identical? However event description is not a choice under "edit consolidation event properties and only parameters represented as integers can be entered in the other event parameters section. This doesn’t seem to work possibly because it is looking by default at $Data/Context/EventDescription$

    regards Lyndon

  2. Jeff25 says:

    Did Lyndon ever manage to get a result for this? i too am having the same problem with R2.

    Thanks

    Jeff

  3. Derick says:

    Kevin,

    When I enter the parameter for alert description in my repeating event monitor my script will not run, however when I take out the parameter my script runs.  Do you have any advice you could offer on this?

  4. Brian Hansen says:

    For my repeated event monitor I also have an event to resolve the monitor. Is there a way to make the alert CLOSED email show the descrption from the evetn that closed the alert rather than the event that opened the alert?

  5. Brian Hansen says:

    For my repeated event monitor I also have an event to resolve the monitor. Is there a way to make the alert CLOSED email show the descrption from the evetn that closed the alert rather than the event that opened the alert?

Skip to main content