/INCLUDE=event-class[,...]
    Specifies an event class or classes to be selected. All other
    event classes are implicitly rejected. Do not use /INCLUDE with
    /EXCLUDE.
    For event-class, specify one or more of the keywords shown in
    the following table. If you specify more than one keyword, use a
    comma-separated list of values enclosed in parentheses.
    Keyword              Description
    ATTENTIONS           Select device attention entries.
    BUGCHECKS            Select all types of bugcheck entries.
    CONFIGURATION        Select system configuration entries.
    CONTROL_ENTRIES      Select control entries. Control entries
                         include the following entry types:
                         o  System power failure restarts
                         o  Time stamps
                         o  System startups
                         o  $SNDERR messages (system service to send
                            messages to error log)
                         o  Operator messages
                         o  Network messages
                         o  ERRLOG.SYS created
    CPU_ENTRIES          Select CPU-related entries. CPU entries
                         include the following entry types:
                         o  SBI alerts/faults
                         o  Undefined interrupts
                         o  MBA/UBA adapter errors
                         o  Asynchronous write errors
                         o  UBA errors
    DEVICE_ERRORS        Select device error entries.
    ENVIRONMENTAL_       Select environmental entries.
    ENTRIES
    MACHINE_CHECKS       Select machine check entries.
    MEMORY               Select memory errors.
    SNAPSHOT_ENTRIES     Select snapshot entries.
    SYNDROME             Select firmware-generated entries that
                         describe a symptom set used by HP support
                         personnel to identify problems.
    TIMEOUTS             Select device timeout entries.
    UNKNOWN_ENTRIES      Select any entry that has an unknown entry
                         class.
    UNSOLICITED_MSCP     Select unsolicited MSCP entries.
    VOLUME_CHANGES       Select volume mount and dismount entries.