Applicable versions and levels
Windows versions: V5.0L10 or later
Action
Points to check
Check the event monitoring conditions definition.
Action method
For definitions that match all messages, check if the action has been defined.
In the above case, review the definitions.
In action definitions that start applications, check if the definition has used the %MSG variable in the parameter.
If the %MSG variable is used in the parameter, the event content is passed to the application. If the application then outputs the event content to the Windows event log, then action execution may loop. Review the monitoring conditions to avoid this problem.