Solved

Export Windows Event Logs with Usernames

Posted on 2014-09-17
3
174 Views
Last Modified: 2014-09-21
Hi,

I have tried to export the windows server event logs by using the Save All events option but when i open the CSV file seems that the Usernames are displayed as SID's.

Is there a way to make the Usernames appear in the exported file.

Thanks
GFC
0
Comment
Question by:GulfIT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 70

Accepted Solution

by:
Merete earned 500 total points
ID: 40329500
0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 40329980
The SID is exported instead of the username in order to protect your users identifies should the files be used for troubleshooting by external parties.

You can use "PsGetSid"  to convert SID to names and vice versa.
http://technet.microsoft.com/en-us/sysinternals/bb897417
0
 

Author Closing Comment

by:GulfIT
ID: 40335002
Done
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question