How to filter the eventlog in Vista manually (XML)

re: How to filter the eventlog in Vista manually (XML)

Jürgen Wieder — Thu, 16 Sep 2010 14:35:32 GMT

Hi all

I reboot my server through the XA Mgmt Console. And I want to know, if there are still users logged on or disconnected... So I created a scheduled task which is triggered by the Application popup from Citrix:

"Application popup: Warning

: The Citrix XenApp you are using will be restarted in 7 minutes. Please save all data and log off. Any unsaved data will be lost."

with the following XML Query:

<Select Path="System">*[System[Provider[@Name='Application Popup']]] and *[EventData[Data='Warning']]</Select>

</Query>

</QueryList>

But it is not working... If I change the 'Warning' to 'Windows' it works.

Any Ideas?

Thanks and regards

Jürgen

re: How to filter the eventlog in Vista manually (XML)

LSB - Inventio.it — Fri, 25 Jun 2010 12:22:06 GMT

Hi....this blog entry was great. Thank you, it helped me along.

Regards

/Lars B.

re: How to filter the eventlog in Vista manually (XML)

BooRadely — Tue, 05 Dec 2006 02:44:18 GMT

I was just thinking another scenario where this would be handy is if you wanted to filter the eventlog on a Longhorn server for a particular machine account or user account.