Tags and attributes used by the XML configuration file

The following is a list of valid XML tags that can be used in the wineventlog.xml configuration file.

Table 1. Supported XML tags
Tag Description Attributes Available sub-tags

<WindowsLogs> </WindowsLogs>

This is the top level XML tag for Windows logs.

None

<log>

<Resync>

<ResyncFilter>

<NotificationFilter>

<Log> </Log>

This defines a log to monitor. The Name attribute specifies the full log name.

Note: The name can be found in the Log Properties dialog box in Event Viewer, and must be entered into the XML configuration file exactly as it appears there.

Name

<Resync>

<ResyncFilter>

<NotificationFilter>

<Resync> </Resync>

This is the XML tag which specifies resynchronization. If this is set to true, the probe will perform a resynchronization at every reconnection. The probe will also perform a resynchronization if you change the value set for this tag. So if it is initially set to false and later changed, then the probe will perform a resynchronization.

None

<ResyncFilter>

<ResyncFilter> </ResyncFilter>

This defines the XPath filter for resynchronization. The filter can be created manually or it can be configured through Filter Current Log dialog box in Windows Event Viewer.

None

None

<NotificationFilter> </NotificationFilter>

This defines the XPath filter for listening for new events. The filter can be created manually or it can be configured through Filter Current Log dialog box in Windows Event Viewer.

None

<ResyncFilter>

<AppServiceLogs> </AppServiceLogs>

This is the top level XML tag for application or service logs.

None

<log>

<Resync>

<ResyncFilter>

<NotificationFilter>