Difference between revisions of "UM:Log Monitoring"

Jump to navigation Jump to search
11 bytes added ,  11:14, 2 April 2012
Line 197: Line 197:




=== <source> Tag ===
=== <nowiki><source></nowiki> Tag ===
<nowiki>Tag <source> can be used to filter records from Windows Event Log by event source. You can specify exact event source name or pattern with * and ? Metacharacters.</nowiki>
Tag <nowiki><source></nowiki> can be used to filter records from Windows Event Log by event source. You can specify exact event source name or pattern with * and ? metacharacters.




Some examples:
Some examples:


<nowiki><source>Tcpip</source></nowiki>
<nowiki><source>Tcpip</source></nowiki>


will match records with event source "Tcpip" (case-insensetive), and
will match records with event source "Tcpip" (case-insensetive), and


<nowiki><source>X*</source></nowiki>
<nowiki><source>X*</source></nowiki>


will match records with event source started from letter "X".
will match records with event source started from letter "X".


 
This tag has no effect for text log files, and can be used as a synonim for <nowiki><tag></nowiki> tag for syslog monitoring.
<nowiki>This tag has no effect for text log files, and can be used as a synonim for <tag> tag for syslog monitoring.</nowiki>
 


=== <level> Tag ===
=== <level> Tag ===
683

edits

Navigation menu