Forum Discussion

Brass Contributor

Jun 23, 2020

How to use PowerShell or any other option to delete certain DNS Analytical logs from event logs?

Hi Everyone, I have a requirement to enable and collect DNS Analytical logs from Event Viewer to ArcSight (SIEM tool). I am able to fetch the logs but I have select "Do not overwrite events (Clea...

MVP

Jun 23, 2020

Sounds like you may be better off using file based logging.

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc776361(v=ws.10)?redirectedfrom=MSDN

Selective deletes from an active evtx may be problematic.