Nov 10 2019 05:42 AM
Nov 11 2019 02:30 AM
@Dave Patrick Hi maybe I wasn't specific, what I meant was that we want to audit the service state using windows event log.
For an example if host A had his service state changed from running to stopped then it will generate an event id 7035/7036 on the windows event log on the Windows Server.
Nov 11 2019 11:58 AM - edited Nov 11 2019 11:58 AM
we want to audit the service state using windows event log.
You can follow along here to build a custom event log filter.