Kansa icon indicating copy to clipboard operation
Kansa copied to clipboard

Issue configuring Kansa to collect specified days of Security logs

Open Mark-E-IT opened this issue 4 years ago • 1 comments

I'm not sure if this is an issue or intended behavior. When attempting to run the following command, I get an error that the "Parameter is incorrect"

.\kansa.ps1 -target $env:computername -ModulePath ".\Modules\Log\Get-LogWinEvent.ps1 Security 1"

Removeing the "1", will allow for the data to be collected. From the documentation, there are three paramaters for the script, Log name, number of Days, and EventIDs, to collect. I'm not sure if I am incorrectly assuming those same parameters should also apply to running the module manually? This would be ideal, as I would like to modify the modules.conf file with the same parameters, as allowing kansa to collect the entire security log takes an extraordinary amount of time.

Mark-E-IT avatar Apr 08 '20 20:04 Mark-E-IT

I messed that up - there's some parameter parsing issues that I need to work through. I'll see if I can get that fixed here in the next few days.

dmoore44 avatar Apr 14 '20 21:04 dmoore44