Hi, Thanks for all the reply. I'm a newbie for sysmon. So just a quick check, if maxqueued => 350 and the queuetime =300, will it be fine? Regards, ChaiLin -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://puck.nether.net/pipermail/sysmon-help/attachments/20090320/c2845c25/attachment.html>