im_msvistalog on Windows not resolving GUID for EventID:4624
Tags:
#1
TompaHompa
Hi, is it possibe to resolve GUIDS in EventID:4624 Saw an other post from last year talking about it would be implemented i EE and after that CE. We currently running ce version and the option for ResolveSID dont work. Does anyone have a solution for this or a workaround as it looks ok in the Eventviewer where it's resolved correctly. We currently run nxlog-ce-2.9.1716.
#1
TompaHompa
Hi, is it possibe to resolve GUIDS in EventID:4624
Saw an other post from last year talking about it would be implemented i EE and after that CE.
We currently running ce version and the option for ResolveSID dont work.
Does anyone have a solution for this or a workaround as it looks ok in the Eventviewer where it's resolved correctly.
We currently run nxlog-ce-2.9.1716.
ResolveSID exists in the NXLog EE product, but not in CE currently. ResolveGUID will be coming in a future patch for NXLog EE as well.
As for workarounds in CE, you may be able to usexm_perl to cal some wmic commands to return the names.
