hobbit-clients.cfg LOG configuration

For each line with "EventID", i want to catch the lines have keyword like
"failed" or "error",which is critical.

lines i want to match:
EventID:2083 Physical disk rebuild failed
EventID:2272 uncorrectable media error.

lines i don't want to match:
EventID:2086 Virtual disk format completed
other lines without "EventID"

thanks!

Geng