Hey Joe. Thanks for your feedback!
I came across this post myself but there's no exact verbiage in there. For example, a when vPRO-enabled computer bluescreens, it throws an error with the exact words "OS Run-time Critical Stop (a.k.a. ‘core dump’, ‘blue screen’)" that we can pick up on. The page you provided gives categories / some exact key words to look for but a bluescreen wouldn't be picked up unless we monitor for ALL AMT events. And doing this has become too chatty, as we get alerts for system boot ups, watchdog timers, etc. that are more informational than actionable.
What I'm looking for is a list of the exact events with their verbiage so that I can set up filters for just the important events and omit the informational stuff that isn't critical to our monitoring.
I think I have located the information you need, this is part of the SDK, but is also online at
When you get to the site utilize the search option for “event groups” and you will see in the list a link for “Event Groups and Event ID’s”