Overview
This article provides a step-by-step process to review the attempted Windows Event Logs for collection.
Process
To find which Windows Event Logs are being attempted for collection with GFI EventsManager:
- Open the GFI EventsManager configuration and navigate to the Configuration > Event Sources.
- In the Group Type field, ensure that Event Sources Groups is selected.
- Navigate to the Group where the target device for review belongs. Select the target device. Right-click and select Properties.
- Select the Windows Event Log tab and review Specify the logs to collect:
- If inherit event log collection and processing from the parent group are selected:
- Navigate to the Group where the target device for review belongs. Right-click and select Properties.
- Select the Windows Event Log tab and review Specify the logs to collect.
Related Article: How can I verify that GFI EventsManager can retrieve Windows events from a target computer?