Avatar of Tessando
Tessando
Flag for United States of America asked on

How To Create a Custom Event Viewer Where I can Suppress Based on Name

I am creating a Custom Event Viewer View because I cannot suppress certain events (this is by design from Microsoft). One of the events that seems to come in quite a bit is MSOIDSVC.EXE that has the Event ID of "0".

When I search by Event ID in the Administrative Events view I see other Events that have the Event ID "0" that I want to show up in this new view.

How can I create a Custom Event Viewer view that doesn't show MSOIDSVC.EXE but does show other Events that have the ID "0"?

Thanks!
Windows OS

Avatar of undefined
Last Comment
Gregory Miller

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Gregory Miller

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Tessando

ASKER
Thank you, Gregory. At my first pass I was able to get this to work. It hadn't occurred to me to manually change the XML.

After I saved it and when I run it, I'm getting a security error about the query being invalid. I have yet to dive deeper into this (and likely won't be able to until tomorrow). Did this happen when you view your query after saving it?

This is GREAT by the way. I'm seeing the behavior I expect (other "0" Event Viewer ID's besides this annoying MSOIDSVC.EXE). So far this is a great solution.

Gregory Miller

I did not get any errors. Post your XML and maybe I can spot the trouble.
Tessando

ASKER
Good idea, Gregory. Here's the XML I'm using:

<QueryList>
  <Query Id="0" Path="Application">
    <Select Path="Application">*[System[Provider[@Name!='MSOIDSVC.EXE'] and (Level=2 or Level=4 or Level=0)]]</Select>
    <Select Path="Setup">*[System[Provider[@Name!='MSOIDSVC.EXE'] and (Level=2 or Level=4 or Level=0)]]</Select>
    <Select Path="System">*[System[Provider[@Name!='MSOIDSVC.EXE'] and (Level=2 or Level=4 or Level=0)]]</Select>
    <Select Path="ForwardedEvents">*[System[Provider[@Name!='MSOIDSVC.EXE'] and (Level=2 or Level=4 or Level=0)]]</Select>
  </Query>
</QueryList>

Open in new window

Thanks for taking a look at this!
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
Gregory Miller

Can you also send this detail about the entry you are wanting to exclude:


I need to see how it is getting logged so I can tell if your changes are correct or not.
Tessando

ASKER
Hello Gregory - Yes, this is the Details -> XML View for the MSOIDSVC.EXE Event Viewer Alert:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> 

- <System> 

<Provider Name="MSOIDSVC.EXE" /> 

<EventID Qualifiers="0">0</EventID> 

<Level>2</Level> 

<Task>0</Task> 

<Keywords>0x80000000000000</Keywords> 

<TimeCreated SystemTime="2021-05-19T14:09:25.014749700Z" /> 

<EventRecordID>197906</EventRecordID> 

<Channel>Application</Channel> 

<Computer>server.domain.com</Computer> 

<Security /> 

</System> 

- <EventData> 

<Data>InitializeSvcAPI failed with hr = 0x80048257</Data> 

<Binary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inary> 

</EventData> 

</Event>

Open in new window


Thanks!
Gregory Miller

I copied and pasted your XML right into my Event Viewer console as a custom view and it worked as is. Of course, I do not have the specific source in any of my event logs so I cannot validate it is working 100% but I am not getting the Invalid Query message which might suggest permissions possibly? Do you have full rights on all of the logs you are querying? Silly question but that is my only thought at this point, and I am not even certain if there are permissions settings for event logs, but I would be surprised if there was not.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Tessando

ASKER
I had to hone in on what the actual MSOIDSVC.EXE. When I was getting the Security notification I mentioned, I was attempting to suppress too much, as it's only an Application and all other lines were unnecessary. To land the plane, this is what ended up working. The original reason to post was to suppress the MSOIDSVC.EXE by name and include two Event ID's in order to have a more precise view of what's occurring on this system:

<QueryList>

  <Query Id="0" Path="Application">

    <Select Path="Application">*[System[Provider[@Name!='MSOIDSVC.EXE'] and (Level=2 or Level=4 or Level=0)]]</Select>

    <Suppress Path="Application">*[System[(EventID=304 or EventID=307)]]</Suppress>

  </Query>

</QueryList>

Open in new window


Thanks!
Gregory Miller

Odd, I got no error using your exact XML Query... But glad this worked for you!