Awhile ago I setup a server task to apply a tag showing When Event ID 1203 is completed then apply a "Scan completed" based tag.
This works great for our Memory scan (a daily task run on every workstation)
I am trying to separate this out. Where i have Tag1 and Tag2. Tag1 would show that Memory scan is complete, Tag2 would show that Full system scan is complete.
Struggling abit to get the tags to differentiate between the 2 scans.
Also need to look at sending a report of machines that DONT have this tag after the task has run to show me which machines I need to look at.