You are hereEvent ID / Event ID

Event ID


Windows Event Log Alerts With Same Event ID and Different Sources

When setting up an alert based on a Windows Event ID Code, is there a way to also specify the Event Source that the Windoows Event ID must come from? For example, Windows Event ID 1126 can have two possible sources--Active Directory and MSExchangeSRS. If I only want an alert for 1126/Active Directory, is there a a way to specify the Active Directory source in the Alert configuration?