A Challange for the Pros - How to parse Event Description?

[Peter G]

Hey all,

I have events that need to be monitored from the same Event Source with
different Event Ids. The specifics of the event are in the Event Description
such as server, database, schema, etc.; as seen below. The question is how
do I parse the Event Description to capture the fields (noted as [Field]) I
need to use in the Event Criteria? I'm trying to reduce the number of
Monitors I will have to create based on all the different scenarios I'm
looking for. So my expression would be:

AND Group
EventSource = source1
Status = Offline

OR Group
Database.Schema = ds1
Database.Schema = ds2
Database.Schema = ds3

OR Group
Cluster = cl1
Cluster = cl2
Cluster = cl3
End AndGroup

I tried using Params/Param[1] but it seems to only work for
[Database.Schema]. Am I doing something wrong?

Example Event
-----------------
Event Type: Warning
Event Source: SourcSystem
Event Category: None
Event ID: 1214
Date: 5/14/2010
Time: 9:45:31 PM
User: N/A
Computer: Machine
Description:
[Database.Schema]

[Environment]

[Service]

[Cluster]

[Status]

I hope I'm making sense. Thanks in advance.
--
Peter G