The underlying query that is often used is not pure XML. It is usually a mix between XML and XPath 1.0. $0
You can read about XPath 1.0 here: http://en.wikipedia.org/wiki/XPath_1.0$0
You can read about filtering using XML + XPath here: http://en.wikipedia.org/wiki/Event_Viewer$0
$0
If you have written custom Event Log filters using XPath, please contribute to the above Wiki page.$0
↧