Capture Security logs on Windows server and copy to remote file server
Hi folks,
I need to capture the security event logs on a Windows server and copy them to a remote file server on the same network. This needs to happen in real-time without user intervention. I was planning on running a scheduled task on either the file server destination or on the source server itself. Can anyone recommend a tool for accomplishing this task. One of the requirements by upper management is that it must be a free solution. Any advice is much appreciated. Thanks in advance!
Windows Server 2012System Utilities
Last Comment
J.D. Payne
8/22/2022 - Mon
Tom Cieslik
You can try using power shell to export to XML file for analyze.
There is a lot option like how many days or what kind of log type
There is a lot option like how many days or what kind of log type
https://eventlogxp.com/blog/exporting-event-logs-with-windows-powershell/