none
Sysmon version: 4.30 Unable to log RRS feed

  • Question


  • System Monitor v11.0 - System activity monitor
    Copyright (C) 2014-2020 Mark Russinovich and Thomas Garnier
    Sysinternals - www.sysinternals.com

    Loading configuration file with schema version 4.22
    Sysmon schema version: 4.30
    Configuration file validated.
    Configuration updated

    Even if I don't set the eventid 1 event logger will not log
    ![10551-11.png][1]

    Process creation is not recorded anyway


    ![10470-22.png][2]


      [1]: /answers/storage/temp/10551-11.png
      [2]: /answers/storage/temp/10470-22.png
    System Monitor v11.0 - System activity monitor
    Copyright (C) 2014-2020 Mark Russinovich and Thomas Garnier
    Sysinternals - www.sysinternals.com

    Loading configuration file with schema version 4.22
    Sysmon schema version: 4.30
    Configuration file validated.
    Configuration updated

    Even if I don't set the eventid 1 event logger will not log
    ![10551-11.png][1]

    Process creation is not recorded anyway


    ![10470-22.png][2]


      [1]: /answers/storage/temp/10551-11.png
      [2]: /answers/storage/temp/10470-22.png



    Even if I don't set the eventid 1 event logger will not log

    Process creation is not recorded anyway

    Tuesday, June 23, 2020 8:14 AM

All replies