How to monitor 4199 events.

I am wondering how to have a collector report a 4199 event (or another way) to report an IP conflict.

I did chat with support and it seems the way the event log is scanned, it will only report events that happen in a few minutes of scanning.
I did set up an EventSource to check for 4199 on a collector (my desktop is a collector for testing) but when I force a IP conflict on my machine and leave it for 5 minutes, when network connectivity return there is no alert.
Now I understand it is hard to report when there is no network connectivity, so I am wondering a way to scan the Event Viewer for past events.

I was able to write a simple powershell command to return results of the System event log, but currently do not know how to put that into LM (if possible).

I am new to LM and came over from Solarwinds/LogicNow so the entire LM dashboard is new to me.

Any help would be appreciated.