Hi friends.
My problem is im trying to catch the Event logs windows to track the status (running, not running) of application. The problem is that all eventid, severity, event source is the same and only the descriptions are different. I found that it is possible to filter event logs by description using eventlog []. Str ()
The trigger only works if catch one value as shown below:
{Template name: eventlog [Security] .str ( ". A process has exited") = 1
But I need there two values. Example is below but it is not working.
{Template name: eventlog [Security] .str ( ". A process has exited", "Decoder.exe") = 1
Another examples and it is not working properly as well
{Template name: eventlog [Security] .str ( ". A process has exited" & "Decoder.exe") = 1
{Template name:eventlog[Security].str("A process has exited.","Decoder.exe")=1
{Template name:eventlog[Security].str("A process has exited." & "Decoder.exe")=1
{Template name:eventlog[Security].str("A process has exited." or "Decoder.exe")=1
What do you advise?
My problem is im trying to catch the Event logs windows to track the status (running, not running) of application. The problem is that all eventid, severity, event source is the same and only the descriptions are different. I found that it is possible to filter event logs by description using eventlog []. Str ()
The trigger only works if catch one value as shown below:
{Template name: eventlog [Security] .str ( ". A process has exited") = 1
But I need there two values. Example is below but it is not working.
{Template name: eventlog [Security] .str ( ". A process has exited", "Decoder.exe") = 1
Another examples and it is not working properly as well
{Template name: eventlog [Security] .str ( ". A process has exited" & "Decoder.exe") = 1
{Template name:eventlog[Security].str("A process has exited.","Decoder.exe")=1
{Template name:eventlog[Security].str("A process has exited." & "Decoder.exe")=1
{Template name:eventlog[Security].str("A process has exited." or "Decoder.exe")=1
What do you advise?