Please bear in mind that the Windows messenger service is not the instant messaging service that many people nowadays associate with it. The messenger service is meant for administrator notifications. If a Windows workstation (or server) receives a message via messenger service, a message box pops up on that workstation and the user needs to press an "OK" button to continue. No interaction is possible.
We create a new rule in our rule set "Defaults". In this case, we assume that we will receive messenger notifications for all events with Event ID = 592. In a real use case, you will make sure that this is a real important event else you will become overwhelmed with the messaging windows. A better example could be a filter that checks for a server running low on disk space (using the disk space monitor).
Alarming via Net Send - Figure 1
This time, we use the "Net Send" action as can be seen below. The target field holds either the name or IP-Address of the workstation this message should be going to. The message text itself goes into "Message to send" field.
Alarming via Net Send - Figure 2
After saving the configuration and restarting the EventReporter, we will receive notifications if the filter condition evaluates to true. A sample message might look like this (slightly obscured in this sample):
Alarming via Net Send - Figure 3