BeagleDave

Eric Thanks for getting back! The file that I provided is an exemplar... The evtxecmd.exe utility is failing on _all_ the ForwardedEvents.evtx logs on my WEC server... I can send...

Eric: The files are too big... Here's a link to a copy of a running log from today that I dumped on OneDrive: https://mysacstate-my.sharepoint.com/:u:/g/personal/david_crawford_csus_edu/EZGlRmi_WmNKpOWlQ-2T00QBvvIEnWlWV8oD2cpysXP0Ew?e=ZbuvYa The link will expire at the...

I'm rolling the logs at 4 Gb... This one was half full when I grabbed it. Let me know if you would like any more exemplar files. Thanks! Dave C.

Eric We have revived our WEC/WEF infrastructure, and I noticed that EvtxECmd still has problems processing the forwarded events log. I can provide exemplar of one of the archived event...