# Associating Event Log Rules

OpManager's Windows [EventLog Monitoring](https://www.manageengine.com/network-monitoring/eventlog-monitoring.html) allows you to collect and analyze the event logs from all your windows devices, via secure WMI protocol. The collected messages are then parsed based on the eventlog rules configured. When an event log entry matches the criteria mentioned in the eventlog rule, alarms are generated and notifications are sent out according to the notification profile configured.

To know about how to add event log rules, [click here](https://www.manageengine.com/network-monitoring/help/monitor-windows-eventlogs.html). To associate event log rule(s) to a device or multiple devices in your network, follow one of the steps below:

- [Associating an Event log rule for an individual device](https://www.manageengine.com/network-monitoring/help/associate-eventlog-rules.html#ind)
- [Associating an Event log rule for multiple devices](https://www.manageengine.com/network-monitoring/help/associate-eventlog-rules.html#mul)

## Associating an Event log rule for an individual device

**NOTE:** This process is applicable only for Microsoft devices (such as Windows, Hyper-V's etc)

1. Go to the Inventory tab and then click on a device to open its device snapshot page.
2. Click on the **Monitors** tab.

![Event log rules association in OpManager: For individual device](https://www.manageengine.com/network-monitoring/help/images/Event-log-for-individual-device.JPG)

3. Click on the **EventLog Monitors** tab. If the EventLog Monitors tab is not displayed, click on More -> EventLog Monitors.
4. Click the + symbol (on the top right corner) and click on the **Associate Monitor** option.
5. Check the Monitoring Interval checkbox. If you would like to change the monitoring interval, specify the new monitoring interval value (in mins).
6. Select the events for which OpManager has to monitor the logs and click on **Associate**.

## Associating an Event log rule for multiple devices

1. Go to **Settings -> Configuration -> Quick Configuration Wizard**.

![Event log rules association in OpManager: For multiple devices](https://www.manageengine.com/network-monitoring/help/images/associate-eventlog-rules-qcw.png)

2. Click on **Event log rules**.
3. Select the log file which OpManager has to monitor for the occurrence of the event.
4. Select the event for which OpManager must raise an alert.
5. Select the device(s) for which OpManager must raise an alert when the specified event occurs.
6. Click on **Save**.

**Note:** You can associate a notification profile for the Event log rules. Click [here](https://www.manageengine.com/network-monitoring/help/configuring-notifications.html) to learn how to create a notification profile. In the "criteria" page, select the particular Event log rule from the **When Event Log Rules generates alarm** section.

To know more about Event log rules, click [here](https://www.manageengine.com/network-monitoring/Eventlog_Tutorial_Part_II.html).