I'm trying to monitor an event in the system logs on a windows 2008 server, I need to also key off part of the test of the event description that is in the general tab, what parameter / syntax do I need to use to make that work?
Paul Arbogast