Notification

Icon
Error

Event log scanning for Applications and Services Logs

Posted: Wednesday, June 11, 2014 6:23:48 PM(UTC)
abarker5

abarker5

Member Alpha Tester Original PosterPosts: 9
2
Like
I know Lansweeper scans the standard Windows event logs, but I would like to also be able to gather events from the "Applications and Services" logs in the event viewer. One log I want to get events from is the AppLocker EXE and DLL log which is located at %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx

Has anyone figured out how to get Lansweeper to read those logs?
Lansweeper
#1Lansweeper Member Posts: 13,442  
posted: 6/11/2014 7:41:22 PM(UTC)
Currently it is impossible to read the events logs that are in that file. But we have added this to our wishlist but we cannot assure you that this is going to be implemented. This is because we receive so many feature requests.
abarker5
#2abarker5 Member Alpha Tester Original PosterPosts: 9  
posted: 6/11/2014 7:54:46 PM(UTC)
Thank you. Many Microsoft Windows applications, such as SharePoint, store their events in those logs. This would be a very valuable enhancement to Lansweeper.
Jockeman
#3Jockeman Member Posts: 10  
posted: 10/6/2014 9:13:31 AM(UTC)
I'm also looking for the AppLocker, and hope support will come soon!
jonbtx
#4jonbtx Member Posts: 1  
posted: 11/13/2018 6:08:44 PM(UTC)
Me too, would like AppLocker logs
Wirkss
#5Wirkss Member Posts: 2  
posted: 1/17/2022 7:56:43 PM(UTC)
What you can do for applocker is use the installer packages and send the following command to the computer you want to audit:

powershell -Command "Get-AppLockerFileInformation -EventLog -EventType Audited -Statistics > \\put\a\shared\location\%username%.txt"

I know it is not optimum but at least you can get the audit result of not allowed apps from AppLocker

Active Discussions

Lansweeper Report showing Custom Field
by  RC62N  
Go to last post Go to first unread
Last post: 5/12/2022 8:50:56 PM(UTC)
Lansweeper HP BIOS Vulnerability
by  Esben.D   Go to last post Go to first unread
Last post: 5/12/2022 1:10:58 PM(UTC)
Lansweeper Microsoft Patch Tuesday – May 2022
by  Jim Durango  
Go to last post Go to first unread
Last post: 5/11/2022 11:45:04 PM(UTC)
Lansweeper 3 Software Versions on 1 row
by  Robert5551212   Go to last post Go to first unread
Last post: 5/11/2022 11:39:51 PM(UTC)
Lansweeper Notes Missing Time Worked Filtered By Agent
by  WilsonTech   Go to last post Go to first unread
Last post: 5/11/2022 7:00:52 PM(UTC)