UltimateWindowsSecurity.com Forum / Ultimate Windows Security Forum / Security Log / 4612 - Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits. / XML form of the events. / Latest Posts

RE: XML form of the events.

RandyFranklinSmith — Thu, 02 Jul 2009 12:05:23 GMT

OK, I think this is what you are looking for:

wevtutil gp Microsoft-Windows-Security-Auditing /ge:true /gm:true /f:xml > junk.xml

Page down through junk.xml until you get to the event IDs

RE: XML form of the events.

RandyFranklinSmith — Thu, 02 Jul 2009 06:49:26 GMT

We are checking, Manju. Have you looked at wevtutil?

XML form of the events.

manju_kb — Tue, 23 Jun 2009 08:00:31 GMT

hi,
In Windows 2008 OS, we can see the events in the XML format also.
Basically the real format of the event is the one that appears in the XML. I mean the tags to identify the data.
Can anybody provide me the XML format data for all security events, with proper tags.
Thanks
Manju_KB