Hello, We have an app on a server that writes out to the Application log. we can set a custom view for this using the “Event sources” field in the Event Viewer.
I am hoping I can use the nxlog configuration to push only that event source up. Is this possible? I tried the below 2 options but to no avail: Within the input module, include this: Exec if $SourceName != 'ENTER SOURCE NAME' drop(); and also: <Input in> Module im_msvistalog Query <QueryList> \ <Query Id="0"> \ <Select Path="System">*[System[Provider[@Name='ENTER SOURCE NAME']]]</Select> \ </Query> \ </QueryList> </Input>
------------------------------------------------------------------------------
_______________________________________________ nxlog-ce-users mailing list nxlog-ce-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
