Attached is an updated version of the Event Log Include MCS template. I have modified the validation section for Event ID to
. The original format was
This caused MCS to behave differently than the IM probe GUI. Now you can use * for all or you can use ranges and/or commas as described here under step 8: Event ID.