You are both are correct. I should be more exact and I can see how it might be confusing. But, you did put me on the right track and it solved my problem so big thanks. The goal was to watch the Firewall log for new entries based on certain criteria (ports, ip address, ect.) and send an email if a line in the log matched that criteria. Thats basically all I wanted for now.
Running it as script when the system starts. Seems to be running and doing what I need. Every time I try to RDP into it I a get an email, although I get 5 since RDP tries 5 times to connect. Would like to figure out how to add the line in the Firewall log to the body of the email. That would be icing on the cake.