11-10-2019 05:42 AM
11-11-2019 02:30 AM
@Dave Patrick Hi maybe I wasn't specific, what I meant was that we want to audit the service state using windows event log.
For an example if host A had his service state changed from running to stopped then it will generate an event id 7035/7036 on the windows event log on the Windows Server.
11-11-2019 11:58 AM - edited 11-11-2019 11:58 AM
we want to audit the service state using windows event log.
You can follow along here to build a custom event log filter.