Forum

Ultimate Windows Security Forum » Security Log » 4612 - Internal resources allocated for the... » XML form of the events.

XML form of the events. Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
manju_kb
Posted 6/23/2009 8:00:31 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 6/23/2009 7:56:00 AM
Posts: 3, Visits: 0
hi,
In Windows 2008 OS, we can see the events in the XML format also.
Basically the real format of the event is the one that appears in the XML. I mean the tags to identify the data.
Can anybody provide me the XML format data for all security events, with proper tags.
Thanks
Manju_KB
Post #115
RandyFranklinSmith
Posted 7/2/2009 6:49:26 AM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
We are checking, Manju.  Have you looked at wevtutil?
Post #125
RandyFranklinSmith
Posted 7/2/2009 12:05:23 PM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
OK, I think this is what you are looking for:

wevtutil gp Microsoft-Windows-Security-Auditing /ge:true /gm:true /f:xml > junk.xml

 

Page down through junk.xml until you get to the event IDs

Post #127
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 9:08am