Windows Event Log

Content Authoring
1

(imported topic written by AndreBordoniOliva)

Hi,

Wonder if there is a possibility of IBM Endpoint Manager tool to collect event log station (Windows Event Logs) through its agent.
It is possible that information are also saved in a file within the server, reports etc?
If you can tell me how I should perform. EX: Create Script, Fixlet, Task
.

Regards,

2

(imported comment written by jgstew)

You could use a Task/Fixlet that would upload the log to the root server.

You can also do this with an Analysis and relevance to look for specific events in the log, but be careful because the event log inspector can be slow, so you need to make sure that the reporting period is not set to “Every Report” and is instead set to something like once every 6 hours.

Here are some examples that make use of the Event Log inspector:

http://bigfix.me/relevance/details/2249

http://bigfix.me/relevance/details/2248

http://bigfix.me/analysis/details/2994621