Answer

Problem

Events Browser is not displaying Events from the folder located under: Applications and Services Logs > Microsoft

Environment

GFI EventsManager (all editions)
All supported environments

Solution

• Gather the Custom Log you wish to add to GFI EventsManager

• NOTE: As example we're using the PrintService log - the following steps apply to any Custom Log
• Write down the Source: and the Log Name: shown in Events Viewer

• In the Events Sources tab select the machine you wish to retrieve the Custom Log from > Right Click > Properties

• In the Windows Event Log tab remove the Inherit flag then Add > Add custom log... > Insert the "log name" > OK

• Re-scan the machine you wish the gather the Custom Logs from

• In Events Browser create a new View and specify the source filed to match the information retrieved from Events Viewer, in this case PrintService

• Enjoy monitoring your new custom view

Cause

Microsoft has moved some default events into a new Microsoft folder and GFI EventsManager doesn't know about it.

 

Chat Answer

Please follow this guide: Add custom Log from Events Viewer to GFI EventsManager