Monitoring and Managing Windows - Using Event Logs
4 important questions on Monitoring and Managing Windows - Using Event Logs
What are the 5 different Event log types provided by Event Vieuwer
Windows logs:
- System (Mostly OS information).
- Application (Mostly application information).
- Security (auditing information).
- Setup (Mostly update information).
Applications and Services logs:
- Contains many dozen of tabs for all the different apps and services running on the OS.
- More of a "Operational" log.
How is an event record build (7 properties)
- Event ID (Not always unique)
- General Description
- Source
- Level (Critical, error, warning, information)
- Date/time
- Computer and/or user
Requirements to consolidate events from multiple computers
- WinRM service required on all systems.
- Windows Event Collector service required on target (event collector).
- Target computer account required to be member of Event Log Readers group on source system.
- Higher grades + faster learning
- Never study anything twice
- 100% sure, 100% understanding
What are the 2 different kinds of Event Subscriptions
Push (Initiated from the source computer)
- Can be configured using GPO.
- Recommended when you expect to add new machines to the subscription over time.
Pull (Initiated from the collector computer)
- Recommended for a small, predetermined list of machines.
The question on the page originate from the summary of the following study material:
- A unique study and practice tool
- Never study anything twice again
- Get the grades you hope for
- 100% sure, 100% understanding
![Trustpilot Logo](/images/design_2020/lp/clp-trustpilot-en.png)