XPath
- Description
-
Short for XML Path Language, it uses a "path-like" syntax to navigate and identify nodes in an XML document. You can also use XPath queries to test addressed nodes within a document to determine whether they match a specific pattern.
Windows Event Log supports a subset of XPath 1.0. You can use XPath queries to subscribe to events that match specific criteria in Windows Event Viewer. NXLog Agent’s Event Log for Windows input module also supports collecting Windows events based on XPath queries.
Event Viewer offers the most practical way to write and test queries. For example, you can right-click a log in Event Viewer and select Filter Current Log. From there, you can configure the filter from the user interface and switch to the XML tab to view the XPath query.
- Also known as
-
Windows XPath, XPath filtering, event viewer XML filter
- See also