Details

      Description

      I would be happy to be able to process eventlog in one function because its conditional expressions are long.

      item: eventlog[Application,,Error,,,,skip]

      Current conditional expressions:

      eventlog\[Application,,Error,,,,skip].logeventid(100)=0&eventlog\[Application,,Error,,,,skip].logsource("AAA")=0|
      eventlog\[Application,,Error,,,,skip].logeventid(200)=0&eventlog\[Application,,Error,,,,skip].logsource("BBB")=0|
      eventlog\[Application,,Error,,,,skip].logeventid(300)=0&eventlog\[Application,,Error,,,,skip].logsource("CCC")=0|
      eventlog\[Application,,Error,,,,skip].logeventid(400)=0&eventlog\[Application,,Error,,,,skip].logsource("DDD")=0
      

      Proposed changes of the conditional expressions:

      eventlog\[Application,,Error,,,,skip].func(id=100,source="AAA")=0|
      eventlog\[Application,,Error,,,,skip].func(id=200,source="BBB")=0|
      eventlog\[Application,,Error,,,,skip].func(id=300,source="CCC")=0|
      eventlog\[Application,,Error,,,,skip].func(id=400,source="DDD")=0
      

      I hope to specify the severity as well.

      func(id=xxx,source="xxx",severity=x)
      

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              kazuo.ito Kazuo Ito
            • Votes:
              2 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated: