That's life. 
Strangely, the program does not make any distinction between 'test' events and real ones. The test events are injected straight into the EventLog and the normal program behaviour picks them up from there like anything else.
The event source is a single string, NOT a list.
The Match string is a single regexp, NOT a list.
Only the eventID is a comma separated list (any whitespace is ignored).
Can you post a dump of the registry bit containing the filter definition that doesn't work? Then I'll try and duplicate the failing here, since (so far) I am unable to make it fail -- I really did run a lot of tests on eventID lists with and without the NOT setting before releasing.Statistics: Posted by stevesh — Wed May 18, 2005 10:40 am
]]>