-
Type:
New Feature Request
-
Resolution: Unresolved
-
Priority:
Trivial
-
None
-
Affects Version/s: None
-
Component/s: Server (S)
I would be happy to be able to process eventlog in one function because its conditional expressions are long.
item: eventlog[Application,,Error,,,,skip]
Current conditional expressions:
eventlog\[Application,,Error,,,,skip].logeventid(100)=0&eventlog\[Application,,Error,,,,skip].logsource("AAA")=0| eventlog\[Application,,Error,,,,skip].logeventid(200)=0&eventlog\[Application,,Error,,,,skip].logsource("BBB")=0| eventlog\[Application,,Error,,,,skip].logeventid(300)=0&eventlog\[Application,,Error,,,,skip].logsource("CCC")=0| eventlog\[Application,,Error,,,,skip].logeventid(400)=0&eventlog\[Application,,Error,,,,skip].logsource("DDD")=0
Proposed changes of the conditional expressions:
eventlog\[Application,,Error,,,,skip].func(id=100,source="AAA")=0| eventlog\[Application,,Error,,,,skip].func(id=200,source="BBB")=0| eventlog\[Application,,Error,,,,skip].func(id=300,source="CCC")=0| eventlog\[Application,,Error,,,,skip].func(id=400,source="DDD")=0
I hope to specify the severity as well.
func(id=xxx,source="xxx",severity=x)