Skip to content

Filter Event Log by Event Source #180

Description

@JaredShaver

Is your feature request related to a problem? Please describe.
The Application Event Log has many useful messages for troubleshooting but it is also very noisy. When working with the Windows Event logs in a normal server situation, the Event Viewer and the APIs for allow for robust filtering. When working with Windows Containers, due to their ephemeral nature, event logs must be pushed out of the container and into some log aggregation tool like Azure Monitor. The LogMonitor gives an all/nothing experience for working with the Event Logs with no filtering or fine grain control.

Describe the solution you'd like
Event Log entries to also emit the Event Source name as appears in the Windows Event Log. Additionally, a way to define a list of Event Source names, and only those matching would be emitted by LogMonitor. Example: An ASP.NET application may only be interested in Event sources ASP.NET 4.0.30319.0 and IIS-W3SVC-WP.

Describe alternatives you've considered
Since the Event Source is not emitted the only alternative would be to create some custom fork of LogMon which is not ideal for ongoing maintenance/support.

Additional context
See also #168 for a similar request for files.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions