-
New Feature Request
-
Resolution: Unresolved
-
Trivial
-
None
-
None
I would be happy to be able to process eventlog in one function because its conditional expressions are long.
item: eventlog[Application,,Error,,,,skip]
Current conditional expressions:
eventlog\[Application,,Error,,,,skip].logeventid(100)=0&eventlog\[Application,,Error,,,,skip].logsource("AAA")=0| eventlog\[Application,,Error,,,,skip].logeventid(200)=0&eventlog\[Application,,Error,,,,skip].logsource("BBB")=0| eventlog\[Application,,Error,,,,skip].logeventid(300)=0&eventlog\[Application,,Error,,,,skip].logsource("CCC")=0| eventlog\[Application,,Error,,,,skip].logeventid(400)=0&eventlog\[Application,,Error,,,,skip].logsource("DDD")=0
Proposed changes of the conditional expressions:
eventlog\[Application,,Error,,,,skip].func(id=100,source="AAA")=0| eventlog\[Application,,Error,,,,skip].func(id=200,source="BBB")=0| eventlog\[Application,,Error,,,,skip].func(id=300,source="CCC")=0| eventlog\[Application,,Error,,,,skip].func(id=400,source="DDD")=0
I hope to specify the severity as well.
func(id=xxx,source="xxx",severity=x)