Difference between revisions of "UM:Log Monitoring"

57 bytes added ,  13:22, 2 April 2012
m
Line 148: Line 148:


This regular expression will match any line not containing character sequence '''abc'''.
This regular expression will match any line not containing character sequence '''abc'''.


=== <id> Tag ===
=== <id> Tag ===
<nowiki>Tag <id> can be used to filter records from Windows Event Log by event ID. You can specify either single event ID or ID range (by using two nubers separated with minus sign). For example:</nowiki>
Tag <nowiki><id></nowiki> can be used to filter records from Windows Event Log by event ID. You can specify either single event ID or ID range (by using two nubers separated with minus sign). For example:
 
 
<nowiki><id>7</id></nowiki>


<syntaxhighlight lang="xml">
<id>7</id>
</syntaxhighlight>


will match records with event ID equal 7, and
will match records with event ID equal 7, and


 
<syntaxhighlight lang="xml">
<nowiki><id>10-20</id></nowiki>
<id>10-20</id>
 
</syntaxhighlight>


will match records with ID in range from 10 to 20 (inclusive).
will match records with ID in range from 10 to 20 (inclusive).


 
This tag has no effect for text log files, and can be used as a synonym for <nowiki><facility></nowiki> tag for syslog monitoring.
<nowiki>This tag has no effect for text log files, and can be used as a synonim for <facility> tag for syslog monitoring.</nowiki>
 


=== <nowiki><source></nowiki> Tag ===
=== <nowiki><source></nowiki> Tag ===
683

edits