You may follow a similar procedure to Installation Error Alarm to add a filter to the event-logs Log Group. These Log Streams are an amalgamation of the three Windows event logs: System, Security and Application.
An MSI installation error is indicated by an Error being reported in the Application Event Log in the MsiInstaller system. The Filter Pattern to represent this is:
[EventType=Application, Status=Error, errorcode,system=MsiInstaller,computer,message]
Specify your metric details as you desire.
Create the alarm with the same settings as the Installation Error Alarm.
Also the Insufficient data alarm may be eliminated by creating a filter for all data the same as described in the Installation Error Alarm.
