Windows Event Filter to Trigger A Scheduled Task Using Custom Data

Server Fault Asked by Nime Cloud on November 6, 2020

I need to create a custom event filter to trigger a scheduled task to recover a hung process.

Here is the event log in XML format:

  <Event xmlns="">
      <Provider Name="ASP.NET 4.0.30319.0" /> 
      <EventID Qualifiers="32768">1309</EventID> 
      <TimeCreated SystemTime="2020-09-26T23:01:21.884208100Z" /> 
      <Security /> 
      <Data>An unhandled exception has occurred.</Data> 
      <Data /> 
      <Data>CACHE_DATABASE_CONNECTIONS : cache error! at Webserver.Caching.Cache.Put(String key, Object val) at very very very long text here</Data> 

What would be the custom event filter? I’ve tried this one it has triggered:

  <Query Id="0" Path="Application">
    <Select Path="System">*[System[(Level=3) and (EventID=1309)]]</Select>

Then I wanted to combine error description and it didn’t work:

  <Query Id="0" Path="Application">
    <Select Path="System">*[System[(Level=3) and (EventID=1309)]] 

Add your own answers!

Related Questions

Is it possible to mount CIFS onto Solaris 10 server

1  Asked on December 25, 2021 by andym


disable ssl for mysql client apps

1  Asked on December 25, 2021


.NET Issue on ADFS SSO behind a Reverse Proxy

1  Asked on December 25, 2021 by yoshimori


Apache simple redirect not working

1  Asked on December 25, 2021 by cma4


ESXi 6.7: Suddenly unable to login

1  Asked on December 25, 2021 by farosch


Jenkins Integration with Android studio

2  Asked on December 25, 2021 by manikandan-ram


Virtual users in sshd from a postgres database

2  Asked on December 23, 2021 by bastien-abadie


Tuning high-raffic nginx and wordpress server

2  Asked on December 23, 2021 by reustmd


Ask a Question

Get help from others!

© 2023 All rights reserved. Sites we Love: PCI Database, UKBizDB, Menu Kuliner, Sharing RPP