locked
ATA logs RRS feed

  • Question

  • Hi

    Just wondering if it is possible to view the ATA alerts on Windows Event Logs? If so, how?

    What I am trying to do is to have all logs (ATA alerts and other event logs) in one single place. For example, download them all into a text file or something. Is this possible?? If so, how???

    Regards

    Monday, August 1, 2016 5:29 AM

All replies

  • Hi,

    AFAIK MS ATA does not log anything in the event logs. I also couldn't find something. All logs are written here: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Logs\ & C:\Program Files\Microsoft Advanced Threat Analytics\Center\Logs\ . All the log files are text files.

    Regards

    Monday, August 1, 2016 6:18 AM
  • Hi,

    The ATA alerts are being logged into "Microsoft ATA" event log under "Applications and Services Logs".

    Hope this helps,

      Microsoft ATA Team. 

    Monday, August 1, 2016 8:47 AM
  • Oh,yeah, sorry missed that :D
    Monday, August 1, 2016 11:09 AM