Collects complete lists of the operating system event logs in Windows environments. If a specific log is not requested, this audit enumerates and acquires all logs.
This audit was formerly known as the w32eventlogs audit.
Supported Platforms
Windows only
Input Parameters
The following input parameters are available for this audit.
eventlog
Details | Values | Description |
|---|---|---|
Platform | Windows | Windows environments |
Format | String | Valid values are a string of text. |
Required? | no | This parameter is not required. |
Repeatable? | yes | This parameter can be repeated in an audit request. |
Valid Values | Specify the event log to parse to collect data for this audit. |
eventlogfullpath
Details | Values | Description |
|---|---|---|
Platform | Windows | Windows environments |
Format | FilePath | Valid values are a full file path and file name. |
Required? | no | This parameter is not required. |
Repeatable? | yes | This parameter can be repeated in an audit request. |
Valid Values | Specify the full path and file name of the event log to parse to collect data for this audit. |
Prevent Hibernation
Details | Values | Description |
|---|---|---|
Platform | Windows | Windows environments |
Format | Bool | Valid values are Boolean values. |
Required? | no | This parameter is not required. |
Repeatable? | no | This parameter can be specified only once per audit request. It cannot be repeated. |
Valid Values | Use Boolean values to indicate whether to prevent the host endpoint from entering hibernation while this audit is executed. |