Recent changes to Windows Event datasource filter need more thought | Archive

Rodger_Keesee · 2016-08-30T16:38:11Z

From the v75 release notes. "Information, FailureAudit and SuccessAudit have been removed as options for the Windows Eventsource Level filter. Level filters set to these values always had to be used in conjunction with an event ID, making them superfluous." This is a bad change. It wasn't superfluous, it was clear interface design. Here's the unintended consequences to this change: 1) I can't have a single windows event datasource that shows both warnings and errors unless I create a new datasource and not change the filter from the default. 2) Why have a “more urgent than” setting when it doesn’t do anything? See the table below 3) There is no way to set an existing datasource back to the default (more urgent than information) once it has been modified. Here are the options that are possible after the change in the interface. Datasource filter setting What is alerted Notes LEVEL More urgent than Warning Will only alert on Errors Pointless because it’s the same as below LEVEL More urgent than Error Will never alert on anything Pointless because it never alerts LEVEL Equal Error Will only alert on Errors

MoreDiscussions

Recent changes to Windows Event datasource filter need more thought | Archive | LogicMonitor Community