Orchestrator 'Monitor Event Log' activity fires every time there is a new event, regardless of filters

Article ID: 2821208 - View products that this article applies to.
Expand all | Collapse all

Symptoms

You may experience one of the following issues while using System Center 2012 Orchestrator Service Pack 1 (SP1) Monitor Event Log activity:

1. Monitor Event Log fires every time there is any new event in the specified event log on the specified computer, regardless of filters on the Monitor Event Log activity.

2. If the event does not match the filters, the published data of the ‘Monitor Event Log’ activity will be empty for all the usual fields (‘Log Entry ID’, ‘Log entry description’, etc).

Status

Microsoft is aware of this issue and is currently investigating. More information will be posted as it becomes available.

Workaround

To work around this issue, put the same filter condition as in the Monitor Event Log activity in the link condition after the Monitor Event Log activity. That way, activities after Monitor Event Log will only execute if an event matching the filter occurs.


Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Properties

Article ID: 2821208 - Last Review: March 19, 2013 - Revision: 1.0
Applies to
  • Microsoft System Center 2012 Orchestrator Service Pack 1
Keywords: 
KB2821208

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com