We'd be seeking improvements to the windows event log monitor. It would be nice to be able to do the following:
– Collect multiple events per monitor service instance
– Search only events that weren't searched the previous poll. (it's a pain that the alert happens multiple times just because it was found in the last 100 events for example).
– Ability to recover from an alert based on the detection of an alternate event log. (e.g. SQL Job fails = Critical, SQL Job Success = Recovery)
There may be other improvements, so others hopefully will add to this list.