Attached is an updated version of the Event Log Include MCS template. I have modified the validation section for Event ID to
<validation>^[0-9*]+([,-][0-9]+)*$</validation>
. The original format was
<validation>^[0-9*]*$</validation>
This caused MCS to behave differently than the IM probe GUI. Now you can use * for all or you can use ranges and/or commas as described here under step 8: Event ID.