Configure Windows event logs
Configure Windows event logs from the Agents configuration menu for the Log Analytics workspace.
Step 1: Go to the Log Analytics workspaces menu in the Azure portal.
Configure data sources
To configure data sources for Log Analytics agents, go to the Log Analytics workspaces menu in the Azure portal and select a workspace.
Step 2: Select Agents configuration.
Step 3: Select the tab for the data source you want to configure.
In this case the Windows event log of SRV1.
Step 4: Select only Error option in the System Log row.
Azure Monitor only collects events from Windows event logs that are specified in the settings.

Reference:
https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-windows-events
https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-data-sources#configure-data- sources