I am trying to setup alert checking for Shadow Protect (event source ShadowProtectSvc) that will:
(1) run a script and send an email when error event id 1121 (backup failed) is found
(2) send an email for all error event ids, except 1121
The problem is that if I create a event log set for (2) and ignore 1121, then (1) stops working, obviously because ignore takes precedence over everything else.
Does anyone know a work around for this?