XPath

Use XPath queries to collect events from the Applications and Services event logs. XPath queries are structured XML expressions that you use to retrieve customized events from the Windows event logs.

When you add an XPath source, you can select from the list of predefined queries or enter your own custom query. If you select a predefined query, the UI adds that query to the Xpath field.

Note: Using more than 10 XPath queries can affect WinCollect performance, depending on the XPath and the number of events received by each channel.