Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have two event which both have the same EventID and is of type Warning, but I want to just send one of them. The other event occurs frequently which brings a lot of noise in the mailbox. How to filter out that? Is it possible?

share|improve this question
Are both events from the same source? How are you filtering -- In eventvwr? In a script? If a script, which language? – jscott Sep 29 '11 at 11:30
In Windows Server 2008 R2 and with the Task Scheduler. – marko Sep 29 '11 at 11:31
up vote 0 down vote accepted

Edit the "Trigger" of your current task and change the Settings from "Basic" to "Custom". Then click New Event Filter... and you can customize what you'd like to trigger based off of with more precision.

Your question is a bit unclear. I can't tell if you have two events that have the same ID and one is of type "Warning" or you have two events of the same ID and both are of type "Warning". If it's the former, this can be resolved by checking the box Warning, otherwise you'll have to create a custom XML filter. If you provide a bit more information, I can assist you.

share|improve this answer
A custom XML filter is needed! – marko Sep 29 '11 at 15:14
If you let us know what the differences between the two events you're trying to filter are, we can help you with that filter. If you continue to hold all the details close to your chest, our hands are tied. – pk. Sep 29 '11 at 15:17

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.