mirror of
https://github.com/amidaware/tacticalrmm.git
synced 2026-04-26 06:55:52 +03:00
[GH-ISSUE #226] allow any event log channel to be queried #140
Labels
No labels
In Process
bug
bug
dev-triage
documentation
duplicate
enhancement
fixed
good first issue
help wanted
integration
invalid
pull-request
question
requires agent update
security
ui tweak
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/tacticalrmm#140
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @bbrendon on GitHub (Jan 1, 2021).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/226
Is it possible to change the event log query to "Event log channel" and allow us to write it in?
For example a channel such as:
Microsoft-Windows-Windows Defender/OperationalThe regular "System" event log is the
Systemchannel@dinger1986 commented on GitHub (Jan 1, 2021):
I achieved this using powershell to query the event viewer and report back
@dinger1986 commented on GitHub (Feb 21, 2021):
@bbrendon is this ok to close as can be achieved via powershell
@sadnub commented on GitHub (May 29, 2021):
We don't plan on adding new checks or expanding existing checks since everything can essentially be accomplished with script checks. Check examples can be created and added to community script to offload the task of creating the script. I believe there might be a few that are there.