[BETA] Events browser not showing all events??

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

[BETA] Events browser not showing all events??

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Networking & Security] >> GFI EventsManager >> [BETA] Events browser not showing all events??

Page: [1]

Message

<< Older Topic Newer Topic >>

[BETA] Events browser not showing all events?? - 15.Sep.2006 8:49:32 AM

jbenson

Posts: 1
Score: 0
Joined: 15.Sep.2006
Status: offline

I have used EventsManager to scan windows events on a machine. When finished the status monitor showed that it collected 1771 security events, but when I go to Windows Events Browser I can only see 382 security events!! I noticed this also happens with other event types (for example system, application, etc)

Why is this?

Post #: 1

RE: Events browser not showing all events?? - 15.Sep.2006 9:12:59 AM

KeithFenech

Posts: 63
Score: 0
Joined: 19.Jun.2006
From: Malta
Status: offline

By default GFI EventsManager does not archive events that are unclassified. This is why the number of collected events is larger than the number of archived events that you are seeing in the Windows Events Browser.

In order to start archiving also the unclassified events you can change this default setting by following these steps:

1) Go to Configuration > Options > Default Classification Actions > Edit defaults
2) Choose Unclassified events actions.
3) Tick the checkbox for 'Archive the event' and press OK.

That should now start archiving all events, even those marked as unclassified.

_____________________________

Keith Fenech � Product Manager
GFI Software

Talk Tech To Me (GFI Blog)

(in reply to jbenson)

Post #: 2