I need to monitor for specific event sources. If I use eventcreate /ID 1 /L APPLICATION /T INFORMATION /SO "4TH CommunicationService" /D "My first log" Where I want to find all events with "4TH", this doesn't work.
If I do another eventcreate /ID 1 /L APPLICATION /T INFORMATION /SO "4TH CommunicationService" /D "4TH My first log" The matching expression will find this correctly.
My question becomes, how do I look in the source field for "4TH", or any other phrase?
Regards,
Wes
