In agent manager you can read a Single Line Log.

It would be a great enhancement to read also evt/evtx files, because there are several software products that write their own event logs that are shown in the event viewer. e.g. Symantec Endpoint Protection. So in case we could read this files we can collect the files via policy automatically.

Comments

  • This funkction would be very useful in Analysis of Alarms and forensic