The Windows Event Log Monitor in SAM 5.5, previous versions of SAM as well as APM changes its status to "Down" when an event matching the criteria defined with in the component monitor is found. This functionality has been improved in SAM 6.0 (currently in beta) to allow users to define the status condition for the Event Log Monitor. This can include matching the original event severity to the appropriate SAM status. E.G. Error = Critical, Warning = Warning, etc. You can alternatively configure the Event Log Monitor to use the warning or critical status based on the number of matching events within a polling interval through the thresholds defined at the bottom of the component monitor settings.
