abel5405 Absent Member.
Absent Member.

Location of Security Event Log file

Greetings All,
Not sure if anybody can help me with this one but I have been asked if I could get the location of the "Security.evtx" file "Security Event Log" on all our monitored servers. Some are saved in the default location and some are not. I have tried using "wevtutil gl Security | findstr logFileName:" but have no way of collecting the output. Can anybody help with this? Many thanks in advance for your help.

Tags (1)
3 Replies
AutomaticReply Absent Member.
Absent Member.

Re: Location of Security Event Log file


It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

These forums are peer-to-peer, best effort, volunteer run and that if your issue
is urgent or not getting a response, you might try one of the following options:

- Visit https://www.microfocus.com/support-and-services and search the knowledgebase and/or check
all the other self support options and support programs available.
- Open a service request: https://www.microfocus.com/support
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.microfocus.com)
- You might consider hiring a local partner to assist you.

Be sure to read the forum FAQ about what to expect in the way of responses:

Sometimes this automatic posting will alert someone that can respond.

If this is a reply to a duplicate posting or otherwise posted in error, please
ignore and accept our apologies and rest assured we will issue a stern reprimand
to our posting bot.

Good luck!

Your Micro Focus Forums Team

andy_doran Absent Member.
Absent Member.

Re: Location of Security Event Log file

Attached (if I did it right) is a KS which will generate an even and/or data point with the information. So providing you selected the "Colelct detail" option on the advanced tab you could run this as a job and then fetch the information using a query like:-

dbo.DataHeader H
inner join dbo.Data D
on D.DataID = H.DataID
H.HiddenLegend like 'Location of % event log'
and D.Detailshort is not null
order by
abel5405 Absent Member.
Absent Member.

Re: Location of Security Event Log file

Happy new year and many thanks for this script!!!!!! I will definitely test it out. What I ended up doing was using was
1 - Use a RunDOS ks to run "wevtutil gl Security | findstr logFileName:" and dump that to a log file location.
2 - Then run an ASCIILog file script to read what was in the dump files and collect data on that.
3 - Use a SSRS report to display the data.
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.