Error adding ValueQueries to Scheduled Task


i wish extract event data event viewer shceduled task trigger:

  <eventtrigger>    <enabled>true</enabled>    <subscription>&lt;querylist&gt;&lt;query id="0" path="application"&gt;&lt;select path="application"&gt;*[system[provider[@name='biztalk server'] , (eventid=5740)] , eventdata[data[1]='pop3']]&lt;/select&gt;&lt;/query&gt;&lt;/querylist&gt;</subscription>    <valuequeries>  	<value name="pop3error">event/eventdata/data[2]</value>    </valuequeries>  </eventtrigger>    
generates following error when import task scheduler , doesn't fire on event:

task registered task "\event viewer tasks\pop3 errors" , not specified triggers start task. user action: ensure task triggers valid configured. additional data: error value: 2147942487.

without addition of valuequeries section task created without errors , triggers event.

i have created 1 valuequeries worked fine i'm not sure why 1 doesn't. 1 works:

  <eventtrigger>    <enabled>true</enabled>    <subscription>&lt;querylist&gt;&lt;query id="0" path="security"&gt;&lt;select path="security"&gt;*[system[provider[@name='microsoft-windows-security-auditing'] , eventid=4624] , eventdata[data[@name='logontype']=10 , data[@name='logonguid']!='{00000000-0000-0000-0000-000000000000}']]&lt;/select&gt;&lt;/query&gt;&lt;/querylist&gt;</subscription>    <valuequeries>  	<value name="ipaddress">event/eventdata/data[@name="ipaddress"]</value>  	<value name="subjectdomainname">event/eventdata/data[@name="subjectdomainname"]</value>  	<value name="subjectusername">event/eventdata/data[@name="subjectusername"]</value>  	<value name="targetdomainname">event/eventdata/data[@name="targetdomainname"]</value>  	<value name="targetusername">event/eventdata/data[@name="targetusername"]</value>    </valuequeries>  </eventtrigger>    

ideas on how first 1 work?

hi,

 

error code 2147942667 indicates directory name invalid. in cases, caused placing quotes around "start in" directory.

 

to troubleshoot issue, please remove surrounding quotes "start in" path. path of program launch must surrounded quotes if contains spaces, "start in" path must not surrounded quotes.

 

regards,


arthur li

technet community support



Windows Server  >  Management



Comments

Popular posts from this blog

Edit Group Policy

Hyper-V VM not reaching OS 'Logon' screen

DNS question...