Use XPath queries to collect events from the Applications and Services event logs. XPath queries are structured XML expressions that you use to retrieve customized events from the Windows event logs.

When you add an Xpath source, you can select from the list of predefined queries or enter your own custom query. If you select a predefined query, the UI adds that query to the Xpath field.