Home

Results 1 to 4 of 4

Thread: Location of Security Event Log file

  1. #1
    Join Date
    Nov 2016
    Posts
    84

    Location of Security Event Log file

    Greetings All,
    Not sure if anybody can help me with this one but I have been asked if I could get the location of the "Security.evtx" file "Security Event Log" on all our monitored servers. Some are saved in the default location and some are not. I have tried using "wevtutil gl Security | findstr logFileName:" but have no way of collecting the output. Can anybody help with this? Many thanks in advance for your help.

    v/r
    Chris

  2. #2
    Join Date
    May 2016
    Posts
    1,716

    Re: Location of Security Event Log file

    abel5405,

    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.

    These forums are peer-to-peer, best effort, volunteer run and that if your issue
    is urgent or not getting a response, you might try one of the following options:

    - Visit https://www.microfocus.com/support-and-services and search the knowledgebase and/or check
    all the other self support options and support programs available.
    - Open a service request: https://www.microfocus.com/support
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.microfocus.com)
    - You might consider hiring a local partner to assist you.
    https://www.partnernetprogram.com/pa...nder/find.html

    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.microfocus.com/faq.php

    Sometimes this automatic posting will alert someone that can respond.

    If this is a reply to a duplicate posting or otherwise posted in error, please
    ignore and accept our apologies and rest assured we will issue a stern reprimand
    to our posting bot.

    Good luck!

    Your Micro Focus Forums Team
    http://forums.microfocus.com



  3. #3
    Join Date
    Sep 2014
    Posts
    67

    Re: Location of Security Event Log file

    Attached (if I did it right) is a KS which will generate an even and/or data point with the information. So providing you selected the "Colelct detail" option on the advanced tab you could run this as a job and then fetch the information using a query like:-

    select
    H.MachineName,
    H.HiddenLegend,
    D.Detailshort
    from
    dbo.DataHeader H
    inner join dbo.Data D
    on D.DataID = H.DataID
    where
    H.HiddenLegend like 'Location of % event log'
    and D.Detailshort is not null
    order by
    H.MachineName
    Attached Files Attached Files

  4. #4
    Join Date
    Nov 2016
    Posts
    84

    Re: Location of Security Event Log file

    Happy new year and many thanks for this script!!!!!! I will definitely test it out. What I ended up doing was using was
    1 - Use a RunDOS ks to run "wevtutil gl Security | findstr logFileName:" and dump that to a log file location.
    2 - Then run an ASCIILog file script to read what was in the dump files and collect data on that.
    3 - Use a SSRS report to display the data.

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •