Collect remote windows logs (application, system, security) with WMI RRS feed

  • Question

  • All of them have been configured successfully, but there are two problems
    Question 1: can WMI collect remote windows logs (application, system, security) through Win32_ Can ntlogevent class collect?
    Question 2: the current WQL statement is: select * from Win32_ Ntlogevent where logfile ='system ', but it is found that it does not match the number of system, application and security logs seen in Windows computer management - event viewer. The log collected through WMI is obviously less than the log in the event viewer. Please give suggestions. Thank you!!
    Wednesday, May 27, 2020 12:11 PM