Hello. How can I make sure that when reading the event log, one event ID 10016 is excluded.
here is the key
eventlog[Application,,"Warning|Error|Failure",,,,]
trigger
logseverity(/Template Windows Event Logs/eventlog[Application,,"Warning|Error|Failure",,,])>1 and nodata(/Template Windows Event Logs/eventlog[Application,,"Warning|Error|Failure", ,,,],60s)<>1
Reading a magazine. I constantly receive ID 10016, I need to ignore it.
here is the key
eventlog[Application,,"Warning|Error|Failure",,,,]
trigger
logseverity(/Template Windows Event Logs/eventlog[Application,,"Warning|Error|Failure",,,])>1 and nodata(/Template Windows Event Logs/eventlog[Application,,"Warning|Error|Failure", ,,,],60s)<>1
Reading a magazine. I constantly receive ID 10016, I need to ignore it.