I have an instance of Windows Server 2008 running some specific services that support my application.
There are events within the Windows Events System Log generated for my services but by other applications such as Service Control Manager which generates an event, in the system log, for my service if it is not able to start due to a bad password. I would like to capture and redirect these to a custom log e.g. MyApplication.Admin which contains all events that I log from within my service. This custom log is then monitored by other software and alerts specific people based on what events it sees. I could monitor both system and the custom log but I would rather keep the events logically grouped within my custom log.
My question is whether this is possible through creating some sort of Custom Rule within the event log to copy specific events from the System Log to MyApplication.Admin Log, or by other means?