Windows log filtering

View thread

irina1

Hi there!Need help in managing windows logs… I need to receive logs that are only fall into warning and critical category. I understand that I need to use <Query> to filter logs, BUT I don't quite understand how to throw away info logs… It must be if $some_value_from_log == ‘INFO’ drop();Or maybe<QueryXML>       <QueryList>           <Query Id='1'>               <Select Path='System'>'WARNING'</Select>           </Query>       </QueryList>   </QueryXML>As for now my <Input> collect everything that fall into system logs category via select path… Any ideas?