Add filtering by event ID
Closed this issue · 1 comments
m-g-k commented
Add support for -fn XXXX where XXXX is an event ID to allow filtering on specific ID numbers
Support should follow the existing Event Viewer support in allowing multiple IDs and ranges of IDs to be supported.
e.g. 10,22,100,1000-1099,-60
Examples to be supported:
Individual ID: 10
Multiple IDs are comma separated: 44,67,44
Ranges are hyphen separated: 444-555
Excluded ranges are prefixed with a hyphen: -777-888
Excluded IDs are prefixed with a hyphen: -678
All the above can be combined in any order