Using the Built-In Tools to Analyze Events

The tools you use to analyze events in Windows have dramatically improved. The command-line tools now have about the same power as the graphical tools, and the graphical tools have become much more sophisticated. Previously you could filter on header fields and do simple searches—now you can search any field of any event. Plus, events can be exposed and analyzed as text or as XML, enabling automation scenarios that were previously much more labor-intensive.

Event Viewer

As mentioned earlier, Event Viewer—the primary tool in Windows for analyzing events—has improved dramatically in Windows Server 2008 when compared to previous releases.

As in previous releases, Event Viewer displays a list of events when ...

Get Windows Server® 2008 Security Resource Kit now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.