Custom report impact

[SandraCarielli]

A fequently asked question that I'd like to put out on the community: "I have a lot of custom Windows reports, do I have to change my message IDs that I used in the where clause?"

[RSAAdmin]

There were a few changes to some messages that were not implemented properly. If you used the any of the following 6 specific message IDs you might have an issue: "Application", "Directory", "Security", "System", "DNS", "File"

For example, if your report used “Security_529_Security”, then there is no change to the message ID.

[RSAAdmin]

However, if you used EventID it is now called ReferenceID and you will need to change that in your reports.