Hi,
I am using the WINAPIEventLog Sensor.
When I create a custom report I just get counts of the events that triggered the sensor which is not really what I need.
In my scenario I am trapping security errors and require a textual report containing the actual event log message trapped.
I can see in the "Log" tab for the sensor that the message text e.g."login failed xxx" under a status of "notify" does exist. So how do I get this out in a report?
Many thanks in advance. Jason
Add comment