Monitoring Windows Server 2008 DHCP Scopes

Hello Guys,

I'm trying to implement a function in my Zenoss 4.2.3 that monitor the dhcp leases based on events, but no success until now.

Zenoss shows messages like this in events:

Resource:          raovmserv05

Component:          Microsoft-Windows-DHCP-Server

Event Class:          /Win

Status:          New

Message:          Scope, 10.0.38.0, is 100 percent full with only 0 IP addresses remaining.

But generates a warning.

I want to turn that kind of event to critical, but dont know how to do it.

Maybe if he check an event like:

"is 100 percent full with only"

"is 99 percent full with only"

"is 98 percent full with only"

"is 97 percent full with only"

"is 96 percent full with only"

"is 95 percent full with only"

If i could create an critical event, transforming messages like thos will can work great, because I have several DHCP scopes.

How can I do ?

Thanks