2.4.10 Start and end of monitoring in event log trap
Event log entries generated between the start and end of the event log trapping service are immediately converted into JP1 events if they match the monitoring conditions. In Windows Vista and later versions of Windows, the event log is monitored in real time. In Windows XP and Windows Server 2003, the event log is monitored at specified intervals to catch any event log that might be missed if a temporary error occurs. You can change this interval in the action definition file for event log trapping (ntevent.conf). If you do not specify an interval in the definition file, the event log is monitored at 10 second intervals.