search based on a list of windows event codes

[ihingos]

I need to setup a search, and later a report that will show certain windows events based on event ID. The list of event codes is pretty long. I know I can just use OR, but that is a ton of ORs. anyone have a better way like having the search function pull a csv or txt file of event IDs, and search for all of them?

[hexx]

You'll probably want to look at event types to automate this sort of thing. A search macro would also achieve a similar result, although it's slightly more complex (and also more powerful) than an event type.