Dear Experts,
Currently we are managing SCOM 2007 and we came across with SCOM challenge to monitoring Event ID 9030 with all Citrix Presentation Servers. Though Event Description having multiple combination of details. But we require to monitor only one below combination information. I meant "The broken connection event source was 2 and event reason was 1" has to be filtered out in the event description. Because whenever event id 9030 occurred on the server then SCOM generating plenty of alerts with different combination of Event descriptions.
"Alert description: Event Description: A broken connection event has occurred on Session Id 13.
The DomainName was XXXXX and the UserName was salmelkar.
The ClientName was LONXXXXX and the ClientAddress was 172.X.X.X.
The broken connection event source was 2 and event reason was 1."
Please let me know the possibilities of sort out this Challenge.
Saravana Raja