Retrieve Event ID's From Windows Event Log On Multiple Computers

[HXG]

we need help on retrieving event ids from Windows Event log on several computers, how would accomplish this?

[Igor Perevozchikov]

Hi HXG!

1. If you have "Real Time System Management" solution installed, you can open required computer in Real-time, search all available NT events and then export them into .csv file.

Here are details how to use RTSM solution and how to configure Communication profile for WMI protocol

https://community.broadcom.com/groups/viewdocument/how-to-quickly-check-client-sma-log-1?CommunityKey=e3ce2616-e75e-43d4-8476-4abffe9fe2e5&tab=librarydocuments

2. Other way is to use a custom inventory
https://knowledge.broadcom.com/external/article/178815

3. "Run Script" task also can be used to quickly identify that managed computer has these required NT events

Create a Script client task > choose to use "Powershell" > in Advanced settings check "Save script output with task status" > specify required powershell script and schedule task. In completed task instance, there will be saved output information from script

Best regards,
IP.

------------------------------
[JobTitle]
[CompanyName]
[State]
------------------------------

[HXG]

Thank you so much Igor! I was actually planning on implementing RTSM as well.