Hi, I am using a passive monitor to watch for a specific windows event log entry. The particular event ID is 36 which is for Disk Quotas. However the message that is sent with this event is less than informative (A user hit their quota threshold on volume D:.) The Windows event however does contain the user account information that is over their quota in the User: field of the event. Is there a way to display this information in the email alert from WUP?
Here is a copy of one of the event entries: Event Type: Information Event Source: Ntfs Event Category: Disk Event ID: 36 Date: 3/29/2005 Time: 12:39:27 PM User: domain\user Computer: OC03 Description: A user hit their quota threshold on volume D:. Data: 0000: 15 00 44 00 02 00 92 00 ..D...'. 0008: 02 00 00 00 24 00 04 40 ....$..@ 0010: 00 00 00 00 00 00 00 00 ........ 0018: 40 00 00 00 00 00 00 00 @....... 0020: 00 00 00 00 00 00 00 00 ........ 0028: 00 00 00 00 1c 00 00 00 ........ 0030: 32 71 6c 98 8e 34 c5 01 2ql~Z4�. 0038: 00 00 00 00 00 00 00 00 ........ 0040: 00 00 08 00 00 00 00 00 ........ 0048: 00 00 10 00 00 00 00 00 ........ Thanks for the assistance, Tim Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
