11 years ago
Need more granular way to filter event logs.
Currently the filtering capabilities for Windows Events are not granular enough to be very effective because there is no tie between Event ID and DataSource.
This is a big problem because it is not uncommon for different EventSources to use the same Event ID.
I would suggest adding another filter option that would allow us to filter on a combination.
Name Operation Value
Complex Exclude (EventID = 123) & (EventSource = IIS)
This would filter Even 123 from EventSource IIS only.