LEM to look at warnings in the Application event log and generate an email

Hi All,

I am new to LEM, testing in the LAB.

I want LEM to look at warnings in the Application event log and generate a mail.

When we have more than 10 Warnings in the last 24 hours in the Application Log for a server, generate an email alert mentioning the server name.

Some thing like " SRVXXX01 has: 12 Errors over the last 24 hours in the System Event Log "

I have created a rule with servicewarning = error, but am not able to make LEM look for errors for a single server.

Also I am not able to get the servername ($Agent) or $detection IP to show the server name in the email notification.

Please help me with configuring this rule and email notification.

Subramaniam.