locked
ATA logs RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi

    Just wondering if it is possible to view the ATA alerts on Windows Event Logs? If so, how?

    What I am trying to do is to have all logs (ATA alerts and other event logs) in one single place. For example, download them all into a text file or something. Is this possible?? If so, how???

    Regards

    Monday, August 1, 2016 5:29 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    AFAIK MS ATA does not log anything in the event logs. I also couldn't find something. All logs are written here: C:\Program Files\Microsoft Advanced Threat Analytics\Gateway\Logs\ & C:\Program Files\Microsoft Advanced Threat Analytics\Center\Logs\ . All the log files are text files.

    Regards

    Monday, August 1, 2016 6:18 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    The ATA alerts are being logged into "Microsoft ATA" event log under "Applications and Services Logs".

    Hope this helps,

      Microsoft ATA Team. 

    Monday, August 1, 2016 8:47 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Oh,yeah, sorry missed that :D
    Monday, August 1, 2016 11:09 AM