exclude window event ID 1111
Hello:
I have a problem .monitor window OS event log.If a event's type is errror, need to exclude this event.How to defined it?
see the introduction：
custom regular expression
eg:
exclude this event ID 1111
eventlog[System,,"Warning|Error|Critical",,!^1111$]
But it is failed......
I have a problem .monitor window OS event log.If a event's type is errror, need to exclude this event.How to defined it?
see the introduction：
custom regular expression
eg:
exclude this event ID 1111
eventlog[System,,"Warning|Error|Critical",,!^1111$]
But it is failed......