i need help with wevutil
i am looking for event id 1000 in the application log
this is common even id error number so i would like to see only the ones that are level 2 - errors (not informational)
currently i can only get the following to output the informational.
is there a switch i am missing to only output error?
this is what i am using.
wevtutil.exe qe Application /q:*[System[(EventID=1000)]] /f:text /c:1 /rd:true