Both C# and CPP event fetches skips events on subscribing mode while fetching Events using EventRecordID

Question

So I was using EventRecordID to subscribe to an Event Viewer data using the query:

   <QueryList>  
     <Query Id="0" Path="System">  
       <Select Path="System">*[System[EventRecordID>=164643]]</Select>  
     </Query>  
   </QueryList>  

And I am passing this into the EvtSubscribe to subscribe to the respective event viewer and read the event records from it. And according to this API it should return me all the events from the log. But some events are skipped:

May I know the reason as to why this is happening, considering this is not a defined behaviour and I scoured into all the docs related to fetching events. Like in this case it is skipping events 164903, 164905, 164906.
Example code to test this behaviour can be found in the official microsoft documentation itself, just by changing the query to the one I gave in this issue: Official microsoft documentation with code explanations for Subscribing to the Windows Events.

Answer 1

Hi Samlight-9356 , If I am not wrong, in this line, "<Select Path="System">*[System[EventRecordID>=164643]]</Select>" you used EventRecordID>=164643 , as you are using Query in XML format you should not use ">" operator as it denotes the closing tag in XML. Find the Correct option instead of using ">" may be like "&lt".

If I am right mail to this email id: skscience.kk@Stuff .com

Thank You.