I have few servers in a specific role and each server create an event in application log when certain error occurs. I want to create an alert when that event get created and suppress it for that server for next 3 day. if i create a query like below
Event | where Source == "Monitoring" | where EventID == 8888
It will create the alert for each server but if i also configure suppress alert, it will suppress the alert for all servers for next 2 days
Any help will be highly appreciated.
