[Common] Name=Activity report Enable=1 [Trigger] //period Type=1 //need logon user NeedLogon=1 //11min Delay=660000 //24hour Interval=86400000 //INFINITE Count=0xFFFFFFFF [Message] //SRVFRWK_ACTION_TYPE_EVENTLOG Type=0x00000016 //SRVFRWK_ACTION_SUBTYPE_EVENTLOG_REPORT SubType=0x00000002 //none Option=0x00000000