Getting the correct select path setup | View post

rd237 7 years ago

I am wanting to see if this is possiable to put in a line for Input event log. 

 <Input eventlog>   

Module im_msvistalog   

SavePos FALSE   

ReadFromLast TRUE   

Query  <QueryList>\            

<Query Id="0">\             

<Select Path="System">*[System[(EventID=22 or EventID=1076 or EventID=6005 or EventID=6006)]] and *[System/Level=2]</Select>\             

</Query>\

</QueryList>

</Input>

Can i have this line in the select path along with just detecting event logs? I also want to monitor all Error messages. 

*[System/Level=2]