Windows Event Filter to Trigger A Scheduled Task Using Custom Data

Server Fault Asked by Nime Cloud on November 6, 2020

I need to create a custom event filter to trigger a scheduled task to recover a hung process.

Here is the event log in XML format:

  <Event xmlns="">
      <Provider Name="ASP.NET 4.0.30319.0" /> 
      <EventID Qualifiers="32768">1309</EventID> 
      <TimeCreated SystemTime="2020-09-26T23:01:21.884208100Z" /> 
      <Security /> 
      <Data>An unhandled exception has occurred.</Data> 
      <Data /> 
      <Data>CACHE_DATABASE_CONNECTIONS : cache error! at Webserver.Caching.Cache.Put(String key, Object val) at very very very long text here</Data> 

What would be the custom event filter? I’ve tried this one it has triggered:

  <Query Id="0" Path="Application">
    <Select Path="System">*[System[(Level=3) and (EventID=1309)]]</Select>

Then I wanted to combine error description and it didn’t work:

  <Query Id="0" Path="Application">
    <Select Path="System">*[System[(Level=3) and (EventID=1309)]] 

Add your own answers!

Ask a Question

Get help from others!

© 2024 All rights reserved. Sites we Love: PCI Database, UKBizDB, Menu Kuliner, Sharing RPP