Hi,
i just wanted to set up a sensor using the following WMI Script:
SELECT * FROM Win32_NTLogEvent WHERE Logfile ='System' AND EventCode = '10010'
The problem ist, that wen using this query, sensor is always down, regardless the number of rows returned, but I want to have it in state ok, if no rows are returned!
Is there a possibility to set up a sensor, that only goes "down" when one or more row is returned, or do I have to use a powershell script (this is what I want to avoid in the first place!)
Add comment