31 Oct
2007
31 Oct
'07
1:16 a.m.
For each line with "EventID", i want to catch the lines have keyword like "failed" or "error",which is critical.
lines i want to match: EventID:2083 Physical disk rebuild failed EventID:2272 uncorrectable media error.
lines i don't want to match: EventID:2086 Virtual disk format completed other lines without "EventID"
thanks!
Geng