search

hanhongwen / eventlog-to-syslog

Automatically exported from code.google.com/p/eventlog-to-syslog
0 stars 0 forks source link

evtsys.cfg do not seem to work #98

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Install evtsys as a service
2. Edit evtsys.cfg, adding "Security-Auditing:4776" on a new line
3. net start evtsys

What is the expected output? What do you see instead?
Output should not include Security-Auditing messages

What version of the product are you using? On what operating system?
EvtSys_4.5.1_64-Bit on a Windows 2008 R2 SP1 64Bit
Please provide any additional information below.

I still get messages such as:

4776: AUDIT_FAILURE 電腦嘗試驗證帳戶的認證。 驗證封裝: 
MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 登入帳戶:  XXX_USER 來源工作站: 
XXX_COMPUTER 錯誤碼: 0xc000006

Original issue reported on code.google.com by vertex...@gmail.com on 23 Mar 2015 at 6:46

Attachments: