XML form of the events. Expand / Collapse
Author
Message
Posted 6/23/2009 8:00:31 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 6/23/2009 7:56:00 AM
Posts: 3, Visits: 0
hi,
In Windows 2008 OS, we can see the events in the XML format also.
Basically the real format of the event is the one that appears in the XML. I mean the tags to identify the data.
Can anybody provide me the XML format data for all security events, with proper tags.
Thanks
Manju_KB
Post #115
Posted 7/2/2009 6:49:26 AM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
We are checking, Manju.  Have you looked at wevtutil?
Post #125
Posted 7/2/2009 12:05:23 PM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
OK, I think this is what you are looking for:

wevtutil gp Microsoft-Windows-Security-Auditing /ge:true /gm:true /f:xml > junk.xml

 

Page down through junk.xml until you get to the event IDs

Post #127
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 5:49pm