Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [windows-event-log]

"Event log" usually refers to the system/server logs on Microsoft Windows machines.

"Event log" usually refers to the system/server logs on Microsoft Windows machines.

617 questions
2
votes
1 answer

Issue with Powershell script not filtering by date

I've put together this powershell function to basically pull events from the NPS log (Specifically denied authentication attempts) from the last point the script was run (the $date variable), sort out the IP and date the log entry was written on and…
mitchell2423
  • 25
  • 5
2
votes
1 answer

IP Address Change event id for Windows 10?

Is there an event id / log / log source for when an ip, gateway, netmask changes in Windows 10?
leeand00
  • 4,869
  • 15
  • 69
  • 110
2
votes
1 answer

Get rid of explanation in windows message log

I am wondering if it is possible to get rid (or simply not store in the first place) the "explanation" inside the events with a specific id, as e.g., event of class 4624 (win2008). Although the question is generic, I include my particular use case…
Briomkez
  • 123
  • 3
2
votes
2 answers

Windows Server 2016 and Windows 10: Cannot set up Windows Event Forwarding via HTTPS

Alright so I've been trying to set up Windows Event Forwarding via HTTPS for a while now and in the process, I've hit my share of errors that I managed to address one by one, but now I've been stuck on one that I can't seem to fix. Also, I want to…
Aura
  • 471
  • 1
  • 5
  • 12
2
votes
2 answers

Permissions changes on Windows event log are not working (GPO change)

I'm trying to grant permissions to the Network Service account (SID S-1-5-20) on the event log "Microsoft-Windows-CAPI2/Operational" (see picture below). However I need to push this change on more than 1000 servers, and more are coming. So my…
Michel de Crevoisier
  • 571
  • 4
  • 9
2
votes
1 answer

Session "NT Kernel Logger" failed to start

I have encountered an error on windows server 2012 recently. Session "NT Kernel Logger" failed to start with the following error: 0xc0000022 More Details: LogName: Microsoft-Windows-Kernel-EventTracing/Admin Event ID: 2 Level: error OpCode: start …
Arani
  • 326
  • 3
  • 20
2
votes
1 answer

filtering event logs with specific TIME range of ANY day

How can I query windows server events between two times of any day? I have tried with PowerShell... Get-EventLog -Logname xxxx -After 04:00:00 -Before 04:00:30 ...but just returns today's events
jreinap
  • 23
  • 1
  • 4
2
votes
1 answer

system center operation management ( SCOM ) log collection and full text searching

I want to collect all events in all windows servers (nearly 50 server) (from windows event viewer) in SCOM, and full text search on it. My question is: how can I do it?
sorosh_sabz
  • 187
  • 12
2
votes
1 answer

Filter Windows Event Security logs by a range of Source IP Address

So i know you could filter by a Source IP Address. But what if you want to filter by a range of Source IP address. i tried