Question on Use of Policy Management

Jan 22, 2010 at 1:55 AM

Hi Ed,

I've setup our installation to use all your default conditions, however the issue I'm facing is that some Events occurred during Server setup which keep triggering conditions (eg. C EventLog-DeviceDriverError).

Our Infrastructure Team policy is to not clear the event log (rather rotate upon filling) so the condition fires all the time.

Is it possible to modify the WQL query so it only looks at Events created for the current day ?  I believe TimeWritten is the field, but I can't figure out how to get the current date in the query.

I'd be interested to see how others are handling this scenario.

 

Thanks,

Andy

 

 

Coordinator
Jan 24, 2010 at 2:52 PM

The idea that the query should only look at today's events sounds good, I'll see what can be done for the next FineBuild release.  Meanwhile if you work out some WQL that does this please let me know.