Configuring a Windows Event Log Threshold
- Last Updated: April 2, 2026
- 2 minute read
Track Windows Event message volume. See when devices are left in full debug/verbose logging mode, devices running periodic tasks that never finish, and more.
Configure a Windows Event Log threshold:
- Name. Used in the Threshold library and the title on the Alert Center Home page.
- Windows event type. Select the Windows Event Log monitor to use with this threshold. The list is populated with Windows Event Log monitors currently configured in the Passive Monitor Library.
- Notification Policy. (Optional) Select the notification policy to apply to this threshold. The policy initiates notifications when an item is outside the configured threshold limits.
- Threshold Check Interval. Enter a time interval for Alert Center to check the WhatsUp Gold database for items that are out of the threshold limits.
Automatically resolve items no longer out of threshold. Select this option if you want Alert Center to automatically resolve items when they return to the value within the threshold limit.
Note: Notification policies are optional for most thresholds. If you do not select a notification policy, no notifications are generated for the threshold, but a dashboard report listing the out of threshold items still appears on the Alert Center Home page.
Add Conditions
- Number of Events. Select and enter the desired threshold criteria variables and values. .
- Duration. Select a time window.
Select Applied Devices 
- Apply to All Devices. By default, the threshold monitors all applicable hosts.
Exclude Devices. Select to build or apply an exclusion list. - Click Apply this Threshold to Specific Devices to choose the hosts to which the threshold applies. Note: Configure the threshold check interval for a longer time than the sampling interval for thresholds relating to trends, such as percent utilization. Configure it for a time the same as (or similar to) the sampling interval when configuring a threshold for a health check.