2.2	Managing Microsoft Windows Vista & Windows Server 2008 events

Microsoft Windows Vista and Windows Server 2008 introduced extensive structural changes in event logging and event log management mechanisms. The most important of these changes include:

•	A new XML-based format for event logs. This provides a more structured approach to reporting on all system occurrences.

•	The introduction of event categorization in four distinct groups: Administrative, Operational, Analytic and Debug

•	A new file format (evtx) that replaces the old evt file format.

NOTE 1: To collect and process Microsoft Windows Vista events, GFI EventsManager must be installed on a system running Microsoft Windows Vista.

NOTE 2: To collect and process Microsoft Windows Server 2008 events, GFI EventsManager must be installed on a system running Microsoft Windows Server 2008.