Well I may be confused here but I have all of my event log jobs set to
the value of 0 so it doesn't go back and get old events. However I
have noticed when i stop the job and restart it at a later time that it
will still get older events and send email alerts. I thought the
setting was supposed to prevent this sort of thing from happening or am
I misunderstanding how it works?

The setting is "number of previous hours to scan"


mhightower's Profile: https://forums.netiq.com/member.php?userid=5354
View this thread: https://forums.netiq.com/showthread.php?t=49055