View, create, edit, and delete event rules in a rule group. When you click Event Rulesin the Navigation pane, a table listing all available event rules appears in the Detail pane.
The table contains the following information:
- Name
- Specifies the name of the rule.
- Enabled
- Indicates whether the rule is currently enabled.
- Type
- Specifies the event rule type, such as filteror forwarding.
- Provider Name
- Specifies the name identifying a particular instance of a provider that generates an event, such as Securityfor Windows Event Log.
- Provider Type
- Specifies the type of information provider that generates the event, such as Windows Event Logor WMI Events.
- Source
- Specifies the Windows event source that matches this rule, such as Microsoft Exchange Serveror Microsoft SQL Server™.
- ID
- Specifies the Windows event identification number that matches this rule.
- Event Type
- Specifies the event type, such as Erroror Audit Failure.
- Event Text Criteria
- Specifies the text-pattern matching expression for event text for events matched by this rule.
- Response
- Indicates whether a rule match generates a response, and if so, what response.
To create an event rule
- In the Navigation pane, right-click Event Rules, and click Create Event Rule.
To edit a rule
- In the detail pane, right-click a rule, and click Properties.
To delete a rule
- In the Detail pane, right-click a rule, and click Delete.
Did you find this information useful? Please send your suggestions and comments about the documentation to momdocs@microsoft.com.