microsoft / CSS-Exchange

Exchange Server support tools and scripts
MIT License
1.22k stars 341 forks source link

[Work Item] VssTester should export event logs in evtx format instead of xml #720

Open Sureshbd opened 3 years ago

Sureshbd commented 3 years ago

Describe the work

VssTester should export event logs in evtx format instead of xml Additional Context Currently the script exports the logs in XML format which is tedious to analyze instead it needs to be in EVTX format.

gabymuntean commented 3 years ago

I find it useful in .XML format as well, can filter it quickly in PowerShell. If you change to .evtx, please also leave a copy in .xml format as well. Thanks.

dpaulson45 commented 3 years ago

I fully plan on leaving the xml in the output. This allows the full data to be in the output where as the evtx contains only the message strings which requires you to have the same event decoder to interrupt it.