I need to do an event log alert condition based on the computer source in the event. What I'm doing is having PC Anywhere on multiple servers log events (such as a logon and logoff) on a central server and then checking that one server and logging/sending e-mails based on the computer that sent the event. For the logging in event, I can do a search on the server name in the description but for the logoff, it does not record the server name in description.
So, is it possible to do an alert condition on fields besides the description?