I have tried both the WMI and Windows API sensors to monitor the Application (Event Viewer) log of one of our servers. I'm wanting to be notified each time Event 1309 appears in the log. I've followed the instructions to a 'T' but neither type of sensor ever shows any event 1309's appearing in the Application log. When I look at Event Viewer > Windows Logs > Application on the server many of these entries appear throughout the day. I check the PRTG sensors and both show '0' under "New Records (volume)".
Does this mean that the sensor's are unable to read the log file, perhaps?