im_msvistalog on Windows not resolving GUID for EventID:4624
Hi, is it possibe to resolve GUIDS in EventID:4624 Saw an other post from last year talking about it would be implemented i EE and after that CE. We currently running ce version and the option for ResolveSID dont work. Does anyone have a solution for this or a workaround as it looks ok in the Eventviewer where it's resolved correctly. We currently run nxlog-ce-2.9.1716.
ResolveSID exists in the NXLog EE product, but not in CE currently. ResolveGUID will be coming in a future patch for NXLog EE as well.
As for workarounds in CE, you may be able to use
xm_perl to cal some
wmic commands to return the names.