EDN Admin
Well-known member
All-
I am trying to create an XML query inside of the security event viewer to filter on only those users who authenticate with a domain controller. To do so you use an XPATH query but I havent been able to correctly script the query. The problem
I am having with the query is the not contains statement.
<QueryList><br/>
<Query Id="0" Path="Security <br/>
<Select Path="Security <br/>
*[System[(EventID=4624 or EventID=4634)]]<br/>
and<br/>
*[EventData[Data[@Name=TargetUserName]<br/>
and<br/>
[not(contains(@Name,$))]]]<br/>
</Select><br/>
</Query><br/>
</QueryList>
Can someone help me with this?
Thanks.
< <hr class="sig BR
View the full article
I am trying to create an XML query inside of the security event viewer to filter on only those users who authenticate with a domain controller. To do so you use an XPATH query but I havent been able to correctly script the query. The problem
I am having with the query is the not contains statement.
<QueryList><br/>
<Query Id="0" Path="Security <br/>
<Select Path="Security <br/>
*[System[(EventID=4624 or EventID=4634)]]<br/>
and<br/>
*[EventData[Data[@Name=TargetUserName]<br/>
and<br/>
[not(contains(@Name,$))]]]<br/>
</Select><br/>
</Query><br/>
</QueryList>
Can someone help me with this?
Thanks.
< <hr class="sig BR
View the full article