Recent changes to Windows Event datasource filter need more thought

Hi Rodger,

We've always excluded all Windows Events of level Informational by default.  As a result, capturing Informational Events required you to set a filter to match the ID of desired Informational Events.  Because you already had to match on ID for Informational Events, there wasn't much value to having Informational as a Level filter.  Re your comments:

1) By default, Windows Eventsources should alert on Warning and Error Events.  You shouldn't need any Level filters to accomplish this.

2) The More urgent than operator may not be useful for Windows Eventsources, but this operator is used (and is valuable) for different Eventsource types

3) We intentionally removed the option to set a Level filter to Informational

Can you give us more detail on the Events you're trying to capture/exclude?  

Thanks,

Sarah