ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Windows Event Viewer Filter

    Scheduled Pinned Locked Moved IT Discussion
    25 Posts 4 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • dbeatoD
      dbeato @momurda
      last edited by

      @momurda said in Windows Event Viewer Filter:

      @tim_g @dbeato @DustinB3403
      Perhaps i could point these at graylog and be able to actually do something with the information.

      Yes, you could. https://marketplace.graylog.org/addons/750b88ea-67f7-47b1-9a6c-cbbc828d9e25

      DustinB3403D 1 Reply Last reply Reply Quote 0
      • DustinB3403D
        DustinB3403
        last edited by

        Are these PDF copies of your invoices? Why isn't your invoicing system keeping record of these?

        momurdaM 1 Reply Last reply Reply Quote 1
        • DustinB3403D
          DustinB3403 @dbeato
          last edited by

          @dbeato said in Windows Event Viewer Filter:

          @momurda said in Windows Event Viewer Filter:

          @tim_g @dbeato @DustinB3403
          Perhaps i could point these at graylog and be able to actually do something with the information.

          Yes, you could. https://marketplace.graylog.org/addons/750b88ea-67f7-47b1-9a6c-cbbc828d9e25

          This doesn't appear to be for File events, more AD events on the user and group side of things rather than the share side of things.

          dbeatoD 1 Reply Last reply Reply Quote 0
          • DustinB3403D
            DustinB3403 @Obsolesce
            last edited by

            @tim_g said in Windows Event Viewer Filter:

            @momurda said in Windows Event Viewer Filter:

            @dustinb3403 I only want to find out who is accidentally deleting invoices.

            If you have the file name, you can opne the event log and "Find" that file.

            You can filter just for deletion events, and use find to find the file or user.

            Honestly you should be able to "find" events by the user who they are generated about.

            momurdaM 1 Reply Last reply Reply Quote 0
            • dbeatoD
              dbeato @DustinB3403
              last edited by

              @dustinb3403 said in Windows Event Viewer Filter:

              @dbeato said in Windows Event Viewer Filter:

              @momurda said in Windows Event Viewer Filter:

              @tim_g @dbeato @DustinB3403
              Perhaps i could point these at graylog and be able to actually do something with the information.

              Yes, you could. https://marketplace.graylog.org/addons/750b88ea-67f7-47b1-9a6c-cbbc828d9e25

              This doesn't appear to be for File events, more AD events on the user and group side of things rather than the share side of things.

              You are right, let's see this one then
              https://marketplace.graylog.org/addons/f42b42f3-c269-45e3-8fc8-923f2194001b
              he can check all of them here
              https://marketplace.graylog.org/addons?tag=Windows

              1 Reply Last reply Reply Quote 0
              • momurdaM
                momurda @DustinB3403
                last edited by

                @dustinb3403 said in Windows Event Viewer Filter:

                Are these PDF copies of your invoices? Why isn't your invoicing system keeping record of these?

                Invoicing system, what is that?
                These pdfs are generated sales orders in CRM that the finance people turn into invoices to send out to customers. They use QB to do that currently, but we are implementing an ERP which hopefully will automate this 1960s workflow.

                DustinB3403D dbeatoD 2 Replies Last reply Reply Quote 2
                • momurdaM
                  momurda @DustinB3403
                  last edited by

                  @dustinb3403 said in Windows Event Viewer Filter:

                  @tim_g said in Windows Event Viewer Filter:

                  @momurda said in Windows Event Viewer Filter:

                  @dustinb3403 I only want to find out who is accidentally deleting invoices.

                  If you have the file name, you can opne the event log and "Find" that file.

                  You can filter just for deletion events, and use find to find the file or user.

                  Honestly you should be able to "find" events by the user who they are generated about.

                  Interesting the Find button in Action pane does work for username.

                  DustinB3403D 1 Reply Last reply Reply Quote 0
                  • DustinB3403D
                    DustinB3403 @momurda
                    last edited by

                    @momurda guess I touched a nerve lol. . .

                    1 Reply Last reply Reply Quote 0
                    • dbeatoD
                      dbeato @momurda
                      last edited by

                      @momurda said in Windows Event Viewer Filter:

                      @dustinb3403 said in Windows Event Viewer Filter:

                      Are these PDF copies of your invoices? Why isn't your invoicing system keeping record of these?

                      Invoicing system, what is that?
                      These pdfs are generated sales orders in CRM that the finance people turn into invoices to send out to customers. They use QB to do that currently, but we are implementing an ERP which hopefully will automate this 1960s workflow.

                      QB has the invoice then and the CRM can make the order again 🙂

                      DustinB3403D 1 Reply Last reply Reply Quote 1
                      • DustinB3403D
                        DustinB3403 @momurda
                        last edited by

                        @momurda said in Windows Event Viewer Filter:

                        @dustinb3403 said in Windows Event Viewer Filter:

                        @tim_g said in Windows Event Viewer Filter:

                        @momurda said in Windows Event Viewer Filter:

                        @dustinb3403 I only want to find out who is accidentally deleting invoices.

                        If you have the file name, you can opne the event log and "Find" that file.

                        You can filter just for deletion events, and use find to find the file or user.

                        Honestly you should be able to "find" events by the user who they are generated about.

                        Interesting the Find button in Action pane does work for username.

                        The rub is you have to guess at what user did what change. . . as the logs could go back months or longer.

                        1 Reply Last reply Reply Quote 0
                        • DustinB3403D
                          DustinB3403 @dbeato
                          last edited by

                          @dbeato said in Windows Event Viewer Filter:

                          @momurda said in Windows Event Viewer Filter:

                          @dustinb3403 said in Windows Event Viewer Filter:

                          Are these PDF copies of your invoices? Why isn't your invoicing system keeping record of these?

                          Invoicing system, what is that?
                          These pdfs are generated sales orders in CRM that the finance people turn into invoices to send out to customers. They use QB to do that currently, but we are implementing an ERP which hopefully will automate this 1960s workflow.

                          QB has the invoice then and the CRM can make the order again 🙂

                          But QB. . . gah

                          1 Reply Last reply Reply Quote 1
                          • 1
                          • 2
                          • 1 / 2
                          • First post
                            Last post