Skip to content

Instantly share code, notes, and snippets.

@jaycdave88
Created February 14, 2020 17:21
Show Gist options
  • Save jaycdave88/a667d237ce7ab23203585f21ad88416b to your computer and use it in GitHub Desktop.
Save jaycdave88/a667d237ce7ab23203585f21ad88416b to your computer and use it in GitHub Desktop.
Agent config settings for win32_event_log.d - will provide logs & events
init_config:
instances:
- type:
- Information
- Critical
- Error
- Warning
- Information
- Audit Failure
- Audit Success
log_file:
- Application
- System
- Security
- Application
- Setup
- Symantec Endpoint Protection Client
logs:
- type: windows_event
channel_path: Application
source: Application
service: Application
sourcecategory: windowsevent
- type: windows_event
channel_path: Security
source: Security
service: Security
sourcecategory: windowsevent
- type: windows_event
channel_path: System
source: System
service: System
sourcecategory: windowsevent
- type: windows_event
channel_path: Setup
source: Setup
service: Setup
sourcecategory: windowsevent
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment