windows eventlog filtering

[smitty]

Hello all - I am trying to filter out some eventlog event ids, IE:

Source Severity Event ID
TermServDevices Error 1111

I want to prevent event ID 1111 from being sent to the zabbix server. Can someone provide an example of how to do that?

Thanks,

Smitty

[frater]

One can give a regular expression to filter the data (get specific event ID's), but what you (and I as well) want is a regular expression that lets everything through, but filters the one in the regular expression.

I haven't found a way to do this.

I would really want this.

Windows will for instance generate an ERROR in the system log when someone accesses the server from a remote location with a local printer for which the server doesn't have a driver... (how silly).

[donjjones]

I'm interested in a way to do this as well...