How to find all possible event ID’s for a given event sourcehttp://blogs.technet.com/kevinholman/archive/2009/02/16/how-to-find-all-possible-event-id-s-for-a-given-event-source.aspxI recently got this question from a customer… and felt it would be good to blog about this. The customer wants to create an Alert, anytime there is a event in the System event log, from a USER32 event source: &#160; HOWEVER – it is a best practice inen-USCommunityServer 2.1 SP1 (Build: 61025.2)Using Event Description as criteria for a rulehttp://blogs.technet.com/kevinholman/archive/2009/02/16/how-to-find-all-possible-event-id-s-for-a-given-event-source.aspx#3204291Thu, 19 Feb 2009 02:16:59 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3204291Kevin Holman's OpsMgr Blog<p>When we write rules and monitors to look at events in the event log.... typically the most common criteria</p> Authoring rules for Windows 2008 events, and how to cheathttp://blogs.technet.com/kevinholman/archive/2009/02/16/how-to-find-all-possible-event-id-s-for-a-given-event-source.aspx#3206391Wed, 25 Feb 2009 04:56:09 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3206391Kevin Holman's OpsMgr Blog<p>So…. with the introduction of Server 2008 into OpsMgr… as a monitored agent, you might need to re-evaluate</p>