Press CTRL+K to open search

Windows Event Message

  • Published on Sep 10, 2026
  • 1 minute(s) read
Prev Next

Searches for a Windows event message. Windows host endpoints can be searched using this token.

Search data is not found in the Windows event message if the message includes line breaks or punctuation. (HXEP-5745 and HXEP-10315 and ENDPT-672)

Field Format

Exhaustive Search?

Exhaustive Search Details

string

Required

Includes searching for a Windows event record.

:
Related articles
  • Windows Event Log Type
    Endpoint Security (HX) > Endpoint Security (HX) Server 10.x User Guide > Searching your enterprise > Search token reference > Token reference
  • Windows Event ID
    Endpoint Security (HX) > Endpoint Security (HX) Server 10.x User Guide > Searching your enterprise > Search token reference > Token reference
  • Timestamp - Event
    Endpoint Security (HX) > Endpoint Security (HX) Server 10.x User Guide > Searching your enterprise > Search token reference > Token reference