How would I search for multiple event id's ?
sourcetype=wineventlog:security EventCode=631 OR Eventcode=632 OR EventCode=633 .......
Is there a way to combine the eventID's in one EventCode statement?
thanks
Mark
How would I search for multiple event id's ?
sourcetype=wineventlog:security EventCode=631 OR Eventcode=632 OR EventCode=633 .......
Is there a way to combine the eventID's in one EventCode statement?
thanks
Mark