Forum Discussion
Mali_Stane
Feb 23, 2024Copper Contributor
Data Collection Rule : XPath queries to filter 7036 without WMI etc
Hi, In PowerShell on server I’m trying to filter out some events from Event Id 7036 Service Control Manager Start stop services. I’m trying to filter out WMI Performance Adapter, so I don’t want t...
Kidd_Ip
Dec 16, 2025MVP
Try removing the "System!" prefix, ensure the "and" operator is contained within a single predicate, and validate the XML schema of your 7036 events to confirm that the "param1" attribute is present.