First of all I'm sorry if this post is in the wrong topic, but I couldn't really find a ipMonitor support topic so quickly.
I'm having a bit of trouble using ipMonitor, more precisely I've made a monitor that checks the eventlog of a server for specific information log files. This works great and all but when I click preview I get to see ALL the log files, while I only wanted to see the latest. I thought it best to use the %capture[timewritten]% variable but I don't really know in which syntax.
The field I use in the montior field is the following
|Exclusions by Event Text|
|if Regex Match|
So what I want is that I only get to see the latest (as sorted by time) log file. Can anyone help me with this?