Windows Event Viewer - XML Custom Filter
- by Frank
<QueryList>
    <Query Id="0" Path="Application">
        <Select Path="Application">
            *[EventData[Data and (Data="Error")]]
        </Select>
    </Query>
</QueryList>
I believe the above XML custom filter would work if I wanted to check for Events where "Data" equals the word "Error".  However, what I want to express is that I want the Events where Data CONTAINS the word "Error" . . . how do I express that?
I've Goggled around, but I can find no references to Regular Expression like pattern matching in the Event Viewer.  XPath has "contains", but if Event Viewer will support it, I cannot seem to figure out the syntax for invoking it.