
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-11-2014 07:23 PM
I know Lansweeper scans the standard Windows event logs, but I would like to also be able to gather events from the "Applications and Services" logs in the event viewer. One log I want to get events from is the AppLocker EXE and DLL log which is located at %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx
Has anyone figured out how to get Lansweeper to read those logs?
Has anyone figured out how to get Lansweeper to read those logs?
Labels:
- Labels:
-
Product Feedback
5 REPLIES 5

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-17-2022 07:56 PM
What you can do for applocker is use the installer packages and send the following command to the computer you want to audit:
powershell -Command "Get-AppLockerFileInformation -EventLog -EventType Audited -Statistics > \\put\a\shared\location\%username%.txt"
I know it is not optimum but at least you can get the audit result of not allowed apps from AppLocker
powershell -Command "Get-AppLockerFileInformation -EventLog -EventType Audited -Statistics > \\put\a\shared\location\%username%.txt"
I know it is not optimum but at least you can get the audit result of not allowed apps from AppLocker

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-13-2018 06:08 PM
Me too, would like AppLocker logs

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-06-2014 10:13 AM
I'm also looking for the AppLocker, and hope support will come soon!

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-11-2014 08:54 PM
Thank you. Many Microsoft Windows applications, such as SharePoint, store their events in those logs. This would be a very valuable enhancement to Lansweeper.

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎06-11-2014 08:41 PM
Currently it is impossible to read the events logs that are in that file. But we have added this to our wishlist but we cannot assure you that this is going to be implemented. This is because we receive so many feature requests.
