For example, our lightweight SA007 includes 2 event logs notifications:

  1. Notify for any System : Disk : Errors (default rule, but can be changed at anytime)
  2. The second Event Log notification rule can be, for example: 
  • Log Name: Application 
  • Source: MSSQLSERVER 
  • Level: Error 

Notifications are received within one minute (much faster than most ELM platforms). 

SentinelAgent has a very light footprint, as compared to the bloated solutions that are available on the market.