This forum is closed. Thank you for your contributions.

Sign in

Microsoft.com

Microsoft

Remove From My Forums

Eventviewer related questions

Question
0

Sign in to vote

Hello,

I have this question:

_________________________

I have made a custom view in Eventviewer with a modified XML file. I get hits on SA_account using the query with != it works with =

Here is my XML

<QueryList>
<Query Id="0" Path="Security">
<Select Path="Security">
*[EventData[Data[@Name='TargetUserName'] and (Data!='SA_account')]]
and
*[System[(EventID='4722')]]
</Select>
</Query>
</QueryList>
How can I solve this issue?

________________________

What forum kan I use?

Kind regards,

Erwin

Friday, February 21, 2020 7:33 AM

Answers

0

Sign in to vote
Hello,

you could ask here:

https://social.technet.microsoft.com/Forums/windows/en-US/home?forum=win10itprosetup

If you still use Windows 7: https://social.technet.microsoft.com/Forums/windows/en-US/home?forum=w7itprogeneral

Regards, Guido
- Proposed as answer by Richard MuellerMVP Friday, February 21, 2020 9:53 PM
- Marked as answer by Richard MuellerMVP Friday, February 28, 2020 1:46 PM
Friday, February 21, 2020 7:50 AM
0

Sign in to vote
Depends on context of question. For SQL server help you could ask here.

https://social.msdn.microsoft.com/Forums/sqlserver/en-US/home?category=sqlserver

or windows security events

https://social.technet.microsoft.com/Forums/en-US/home?forum=win10itprosecurity

or desktop deveopment ask here

https://social.msdn.microsoft.com/Forums/windowsdesktop/en-US/home?forum=Windowsgeneraldevelopmentissues

Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows Server] Datacenter Management

Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.
- Proposed as answer by Richard MuellerMVP Friday, February 21, 2020 9:53 PM
- Marked as answer by Richard MuellerMVP Friday, February 28, 2020 1:46 PM
Friday, February 21, 2020 1:31 PM

All replies

0

Sign in to vote
Hello,

you could ask here:

https://social.technet.microsoft.com/Forums/windows/en-US/home?forum=win10itprosetup

If you still use Windows 7: https://social.technet.microsoft.com/Forums/windows/en-US/home?forum=w7itprogeneral

Regards, Guido
- Proposed as answer by Richard MuellerMVP Friday, February 21, 2020 9:53 PM
- Marked as answer by Richard MuellerMVP Friday, February 28, 2020 1:46 PM
Friday, February 21, 2020 7:50 AM
0

Sign in to vote
Depends on context of question. For SQL server help you could ask here.

https://social.msdn.microsoft.com/Forums/sqlserver/en-US/home?category=sqlserver

or windows security events

https://social.technet.microsoft.com/Forums/en-US/home?forum=win10itprosecurity

or desktop deveopment ask here

https://social.msdn.microsoft.com/Forums/windowsdesktop/en-US/home?forum=Windowsgeneraldevelopmentissues

Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows Server] Datacenter Management

Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.
- Proposed as answer by Richard MuellerMVP Friday, February 21, 2020 9:53 PM
- Marked as answer by Richard MuellerMVP Friday, February 28, 2020 1:46 PM
Friday, February 21, 2020 1:31 PM