All of them have been configured successfully, but there are two problems
Question 1: can WMI collect remote windows logs (application, system, security) through Win32_ Can ntlogevent class collect?
Question 2: the current WQL statement is: select * from Win32_ Ntlogevent where logfile ='system ', but it is found that it does not match the number of system, application and security logs seen in Windows computer management - event viewer. The log collected
through WMI is obviously less than the log in the event viewer. Please give suggestions. Thank you!!
