Event Viewer Custom Search

From KlavoWiki
Revision as of 04:30, 26 September 2016 by David (talk | contribs) (Created page with "= Computer Name = Security Logs by Computer Name <pre> <QueryList> <Query Id="0" Path="Security"> <Select Path="Security">*[EventData[Data[@Name="Workstation"] and (Data...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

Computer Name

Security Logs by Computer Name 

<QueryList>
  <Query Id="0" Path="Security">
    <Select Path="Security">*[EventData[Data[@Name="Workstation"] and (Data='MYCOMPUTERNAME')]]</Select>
  </Query>
</QueryList>
Retrieved from ‘https://klaverstyn.com.au/david/wiki/index.php?title=Event_Viewer_Custom_Search&oldid=2128’