Parser XML Client:
==============
<parser>
<file>C:\WINDOWS\system32\config\SysEvent</file>
  <rules>
    <rule>
      <severity>1</severity>
      <match>(.*)</match>
      <event params="1">100003</event>
    </rule>
  </rules>
</parser>

Agent Configuration:
===============
#
# NetXMS agent configuration file
# Created by agent installer at Mon May 09 11:58:39 2011
#

MasterServers = 10.221.0.179
LogFile = {syslog}
FileStore = D:\NetXMS\var
SubAgent = ecs.nsm
SubAgent = ping.nsm
SubAgent = logwatch.nsm
SubAgent = portcheck.nsm
SubAgent = winperf.nsm
SubAgent = wmi.nsm
SubAgent = ups.nsm

#Log parser definition
*LOGWATCH
Parser = parserwinxp.xml

Thanks
Pat