Event ID monitor unable to capture matched content

Event ID monitor unable to capture matched content.
Sitescope is unable to fetch no of match content details while configuring the event log monitor
Suggest to Change the Source and ID match to DCOM: 10020 instead of Microsoft-Windows-DistributedCOM
I was able to monitor the error event 10020 from DistributedCOM using the follow settings.
Furthermore, I would suggest you should use EventSourceName from event details as Source name from now on.
Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s