Milestone XProtect Express 2014 - Manual (Page 116)

Milestone XProtect ® Express 2014 Administrator's Manual
www.milestonesys.com 116 Advanced configuration
Name Description
Event substring
Lets you specify the individual items for which XProtect Express
should look out for when analyzing data packages. Specify one or
more terms, then click the Add button to add the specified term(s) to
the Event message expression field, the content of which will be
used for the actual analysis. Examples:

Single term: User001 (when added to the Event message
expression field, the term will appear as "User001")

Several terms as one item: User001 Door053 Sunday
(when added to the Event message expression field, the
terms will appear as " User001 Door053 Sunday")
When you add several terms as one item (appearing as, for
example, " User001 Door053 Sunday" in the Event message
expression field), everything between the quotation marks must
appear together in the package, in the specified sequence, in order
to match your criterion. If the terms must appear in the package, but
not necessarily in any exact sequence, add the terms one by one
(that is so they will appear as "User001" "Door053" "Sunday" in the
Event message expression field).
Tip: It is OK for TCP and UDP packages used for generic events to
contain special characters, such as @, #, +, 㪠~, etc. within the text
string to be analyzed.