cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post

Report Based on Windows Event ID

Report Based on Windows Event ID

We have Log Analyzer setup so that it reports Windows Events based off event id's. However if we want to create a report and search for a specific event id there is not an option for event id under the Add Column when creating the report.

The screenshots provided show where we created a report where the 'Log Type Name contains Windows Events' and 'Message contain 4778'. (This produces the report but has records not associated with Event ID 4778. It just sees the number 4778 in the message and reports on it. For example it my give a record that has event id 4624 because it sees 644778 in the message which we do not want.)

00562960-III.png

We would like a report Based on Windows Event ID

Example:  Where EventID = '4778'