I'm looking to set up a custom view for a particular site on our IIS, in this case, ID 28. I can get as far as creating
Last 30 days, critical, error and warning by log (application) with the keyword 'Classic' which will pick up all our .Net appliction errors. There is no evidence in the log to state what IIS site ID it originated from though.
How can I amend the filter to target at least either: Request Information > Thread Account Name (which is the IIS pool name as far as I can see) or Application Information > Application Path.
Could somebody point me in the right direction to amend the query XML manually to target either of the above?