Event Viewer Custom Search
From KlavoWiki
Jump to navigationJump to search
Computer Name
Security Logs by Computer Name
<QueryList>
<Query Id="0" Path="Security">
<Select Path="Security">*[EventData[Data[@Name="Workstation"] and (Data='MYCOMPUTERNAME')]]</Select>
</Query>
</QueryList>
