Notification

Icon
Error

Event log scanning for Applications and Services Logs

Posted: Wednesday, June 11, 2014 6:23:48 PM(UTC)
abarker5

abarker5

Member Alpha Tester Original PosterPosts: 9
2
Like
I know Lansweeper scans the standard Windows event logs, but I would like to also be able to gather events from the "Applications and Services" logs in the event viewer. One log I want to get events from is the AppLocker EXE and DLL log which is located at %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx

Has anyone figured out how to get Lansweeper to read those logs?
Lansweeper
#1Lansweeper Member Posts: 13,442  
posted: 6/11/2014 7:41:22 PM(UTC)
Currently it is impossible to read the events logs that are in that file. But we have added this to our wishlist but we cannot assure you that this is going to be implemented. This is because we receive so many feature requests.
abarker5
#2abarker5 Member Alpha Tester Original PosterPosts: 9  
posted: 6/11/2014 7:54:46 PM(UTC)
Thank you. Many Microsoft Windows applications, such as SharePoint, store their events in those logs. This would be a very valuable enhancement to Lansweeper.
Jockeman
#3Jockeman Member Posts: 10  
posted: 10/6/2014 9:13:31 AM(UTC)
I'm also looking for the AppLocker, and hope support will come soon!
jonbtx
#4jonbtx Member Posts: 1  
posted: 11/13/2018 6:08:44 PM(UTC)
Me too, would like AppLocker logs
Wirkss
#5Wirkss Member Posts: 2  
posted: 1/17/2022 7:56:43 PM(UTC)
What you can do for applocker is use the installer packages and send the following command to the computer you want to audit:

powershell -Command "Get-AppLockerFileInformation -EventLog -EventType Audited -Statistics > \\put\a\shared\location\%username%.txt"

I know it is not optimum but at least you can get the audit result of not allowed apps from AppLocker

Active Discussions

Lansweeper State change
by  siixems   Go to last post Go to first unread
Last post: Today at 1:53:25 PM(UTC)
Lansweeper Memory leak and huge scan time
by  I_just_make_more_updates  
Go to last post Go to first unread
Last post: Today at 1:42:56 PM(UTC)
Lansweeper Lansweeper commitment for Helpdesk?
by  mecha   Go to last post Go to first unread
Last post: Today at 11:03:07 AM(UTC)
Lansweeper Router is scanned as webserver
by  Bimal  
Go to last post Go to first unread
Last post: Today at 6:39:15 AM(UTC)
Lansweeper Unable to back up database
by  Jeff Palmer   Go to last post Go to first unread
Last post: 5/13/2022 7:07:45 PM(UTC)
Lansweeper Add custom values
by  nm169  
Go to last post Go to first unread
Last post: 5/13/2022 4:44:28 PM(UTC)
Lansweeper Error: Invalid object name 'tblMonitorUni'
by  WFEC   Go to last post Go to first unread
Last post: 5/13/2022 3:16:01 PM(UTC)
Lansweeper how to scan intune managed win10 clients?
by  FrankSc  
Go to last post Go to first unread
Last post: 5/13/2022 11:51:15 AM(UTC)