A few questions
I am monitoring for a specific event in the application log. Polling interval is every 24hours.
Does the monitor only look at the time between polling? or does the event log have to be cleared after detection?
If multiple hits are found in the event log. Is this one alert for total? or one alert for each?