I can create Event Viewer Tasks to react to Event IDs, but I'm having a tough time getting the XML working to react to an event ID to a specific task. I've been testing using the filter.
The task Details tab gives me:
<Data Name="TaskName">\MoveEDIFiles</Data>
But creating a filter with:
<Select Path="Microsoft-Windows-TaskScheduler/Operational">*[EventData[Data[@Name = "MoveEDIFiles"]]]</Select>
returns 0 results. I've tried a slash in front, single quotes, etc. I'm pretty sure I'm working in the right directory, since when I make the Boolean !=, I can see that the task has events in the filtered log.
Does anyone have any ideas? Or a site to direct me to?