Questions tagged [event-id]
36 questions
0
votes
3 answers
Monitoring Security logs for EventID using Powershell
I'm looking to use Powershell to monitor the "Security" logs of a list of 2003 and 08 servers for a specific event ID. So far i've used this
$servers = gc c:\temp\servers.txt
foreach ($server in $servers)
{
$Query = "SELECT * FROM…
user1890242
- 69
- 1
- 10
- 19
0
votes
1 answer
Unusual event.EventID numbers like -2147481364 in Python using win32evtlog from Pywin32
I wrote a python(3.2) script to ban ips on certain events from the event logs on a Windows 2008 server and I was trying to test if it would ban ips from sql brute forcing attempts properly. Unfortunately so far it's not getting to that part of the…
Jason White
- 666
- 4
- 10
- 23
0
votes
1 answer
Eventbrite retrieve event id from event_new PHP API method
I need some help in retrieving the event id from the event_new PHP API method. I can see that the URL method works well by returning an XML file containing the new ID, however the response I get from the PHP API method is simply 'NULL'.
The…
-1
votes
1 answer
How to convert string field into integer field in kibana
So i am sending data of event viewer through winlogbeat to kibana. Actually my event_data.boottime value is coming in string format and i wanted this data field in number format. I have tried changing the format in winlogbeat.template.json but its…
Gaurav Jain
- 11
- 2
-1
votes
3 answers
Filtering only second Account Name in windows event log using a regex
Does anyone know reqex syntax to filter only second Account Name from Windows Event Log ? I don't want first Account Name, that I got but second Account name mentioned is Account that was deleted , that's what I'm interested in finding out.
I'm…
John
- 1
- 2
-3
votes
1 answer
Convert Date into Factors for sequential analysis
I want to convert Date into factor for sequential analysis.
I tried the following code:
start_month <- '2019-01-01'
elapsed_month <- function(end_date, start_date) {
ed <- as.POSIXlt(end_date)
sd <- as.POSIXlt(start_date)
12 * (ed$year -…
Dominik Raab
- 35
- 4