More detailed monitoring options for Windows Event Log monitors: Ability to trigger monitor only when X number of specific event ID within specified time frame (minutes, days), for Example trigger monitor when Source - Eventlog, Type -Error, ID - 6008 is detected 3 times within 1 day. Ability to trigger monitor when text matches pattern within the event. For example Event source - DIsk, ID 7, but only trigger monitor if text in the event matches "DISK0" See how other RMMS do this: Datto - https://help.datto.com/s/article/KB360021847131 Kaseya VSA - https://helpdesk.kaseya.com/hc/en-gb/articles/229034368-How-do-I-monitor-a-Windows-Event- Also - somewhat related to this request, please also include the event description in the alert that is tied to the monitor. Getting an email saying Event ID 11 was detected doesn't do any good when you don't know off the top of your head what that means.