Hi SCOM guru's,
I have a strange little problem regarding the collecting of evenlogs with the SCOM event collection rule.
I have created a eventcollection rule which collect events from computers. Really simple. Everything goes well when the event description in the eventlog is a single line. (tested with the eventcreate command). The SCOM collection rule works
When I create a test-event with multiple lines in the description-field using CTRL-L the event is created in the eventlog. I can see the multiple lines in the description. However, the SCOM collection rule doesn't work at all. It simply will not show anything in SCOM.
In the eventviewer general tab I see the event correctly. Only in the details tab I see the following text:This event is not displayed correctly because the underlying XML is not well formed. Below is the raw text of the event.
Any idea's how I can solve this?
The collection rule only looks at the specific eventlog, a specific source and ID. Single lined descriptions works great, multi-lined descriptions not at all.
Best regards,
Mark