Windows log filtering
Hi there!Need help in managing windows logs… I need to receive logs that are only fall into warning and critical category. I understand that I need to use <Query> to filter logs, BUT I don't quite understand how to throw away info logs… It must be if $some_value_from_log == ‘INFO’ drop();Or maybe<QueryXML> <QueryList> <Query Id='1'> <Select Path='System'>'WARNING'</Select> </Query> </QueryList> </QueryXML>As for now my <Input> collect everything that fall into system logs category via select path… Any ideas?