All client computers on your company network run Windows 7.
The event logs contain errors from an application source and the Kernel-Power source. You plan to track the errors.
You need to capture only the relevant data to generate a report.
What should you do?
A.
Open Event Viewer and sort by Source.
B.
Open Event Viewer and create a Custom View. Include the application and system logs and include the event sources. Save the filter results as an XML file.
C.
Open Performance Monitor and save the template from EventLog-System Event Trace Session.
D.
Open Performance Monitor and save the template from EventLog-Application Event Trace Session.
http://blogs.technet.com/b/askds/archive/2011/09/26/advanced-xml-filtering-in-the-windows-event-viewer.aspx